Network Security Analysis

Network Security Analysis Engineer Jobs

2 jobs found

Today

Network Security Engineer

Legato Security Salt Lake City, UT

Salt Lake City, UT

Today

Full time Casb Cloud Firewall Cloud Platforms

Apply Now

Job Description

Legato Security is seeking a Network Security Engineer to support the administration, implementation, troubleshooting, design, and continuous improvement of customers’ networks and security environments. This hybrid/mostly remote role includes some on-call time and may require occasional time in the office in downtown Salt Lake City, UT, along with client visits as needed.

Responsibilities

Support, administer, configure, and troubleshoot firewalls, Zscaler services, Netskope, VPN technologies, and related network security platforms across internal and customer environments.
Collaborate with customers to understand business and technical requirements, troubleshoot issues, evaluate solutions, and implement changes.
Respond to and resolve service tickets, incidents, requests, and escalations involving network connectivity, firewalls, Zscaler, Netskope, and related technologies.
Act as an escalation point for technical issues requiring additional troubleshooting, analysis, or specialized expertise beyond initial support.
Support and configure firewall and network product environments to meet customer connectivity and security requirements.
Participate in firewall, Zscaler, and Netskope implementation, migration, upgrade, replacement, and configuration projects.
Assist with configuration and maintenance of Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, and related services.
Assist with configuration and maintenance of the Netskope One platform, including SASE, SSE, CASB, SWG, Private Access, Cloud Firewall, SD-WAN, and more.
Support Zscaler and Netskope policies, including URL filtering, firewall policies, SSL inspection, authentication, access policies, application access, traffic forwarding, connectivity, routing, DNS, DHCP, NAT, VPNs, SSL/TLS inspection, VLANs, switching technologies, and policy enforcement.
Configure and troubleshoot VPN technologies including SSL VPN, IPsec, Remote Access VPN, and Site-to-Site VPN connections.
Review firewall logs, Zscaler logs, Netskope logs, packet captures, routing tables, traffic flows, error messages, and other diagnostics to determine root cause.
Assist with customer onboarding and changes to existing network and security environments, including testing and validation prior to production deployment.
Create and maintain firewall documentation, configuration records, troubleshooting procedures, implementation notes, and customer-specific technical documentation.
Participate in incident response, problem management, and root-cause analysis activities as needed.
Manage multiple unresolved tickets, incidents, projects, and customer requests, individually and in collaboration with team members and technical resources.
Support engineers and analysts through troubleshooting processes, technical methodologies, and network security best practices.
Identify opportunities to improve network configurations, security controls, operational processes, troubleshooting methods, documentation, and customer experience.
Maintain awareness of emerging networking and cybersecurity technologies, vendor platform changes, vulnerabilities, security capabilities, and industry best practices.

Requirements

Hands-on experience with one or more network security technologies such as firewalls, Zscaler, Netskope, VPNs, secure web gateways, SSE/SASE platforms, proxies, or zero-trust technologies.
Strong troubleshooting and analytical skills to diagnose network and security issues methodically.
Working knowledge of routing concepts and protocols including TCP/IP, BGP, OSPF, EIGRP, IS-IS, RIP, Static Routing, and SD-WAN.
Working knowledge of LAN technologies including Ethernet switching, VLANs, Spanning Tree Protocol (STP), port security, link/port aggregation, and LAN/WAN architecture.
Experience or familiarity with physical, virtual, and cloud firewall technologies.
Understanding of firewall concepts including security policies, zones and interfaces, objects and object groups, routing, NAT, VPNs, application and service policies, logging, and traffic analysis.
Knowledge or familiarity of VPN technologies including IPsec, SSL VPN, Remote Access VPN, and Site-to-Site VPN.
Working knowledge of NAT concepts (Source NAT, Destination NAT, and U-Turn/Hairpin NAT), DNS, and DHCP.
Familiarity with authentication and identity technologies such as SAML, SSO, MFA, Active Directory, Entra ID, and SCIM.
Ability to capture, analyze, and interpret network traffic using Wireshark or similar packet-analysis tools.
Ability to interpret network and security logs, packet captures, routing information, error messages, and other diagnostics.
Ability to design and document network and related security solutions would be helpful.
Strong customer-facing skills, including active listening, evaluating requirements, asking appropriate questions, and clearly explaining technical issues and solutions.
Ability to communicate effectively with both technical and non-technical audiences.
Ability to work in team environments and independently as needed.
Ability to handle multiple customers, environments, projects, incidents, and priorities simultaneously.
Ability to manage time effectively and see incidents, requests, and technical issues through to resolution.
Willingness and ability to learn new technologies and build deeper expertise across networking and network security platforms.

Technologies

firewalls, Zscaler, Zscaler Internet Access (ZIA), Zscaler Private Access (ZPA), Zscaler Client Connector, Zscaler Digital Experience (ZDX), Zscaler Cloud Firewall, Zscaler Data Loss Prevention (DLP)
Netskope, Netskope One, SASE, SSE, CASB, SWG, Private Access, Cloud Firewall, SD-WAN
Zscaler traffic forwarding technologies, Zscaler API integrations and automation, Netskope One SASE, Netskope One SSE, SkopeAI
VPN technologies, SSL VPN, IPsec, Remote Access VPN, Site-to-Site VPN connections
TCP/IP, BGP, OSPF, EIGRP, IS-IS, RIP, Static Routing
Ethernet switching, VLANs, Spanning Tree Protocol (STP), Port security, Link/port aggregation
NAT, Source NAT, Destination NAT, U-Turn/Hairpin NAT, DNS, DHCP
SAML, SSO, MFA, Active Directory, Entra ID, SCIM, SSL inspection, SSL/TLS inspection
Wireshark, packet captures

Benefits

Growth-phase startup environment with opportunity for advancement based on performance.
Startup culture with an office in downtown Salt Lake City, UT.
Competitive medical and dental benefits for employees and family members.
Additional company-provided benefits such as short-term disability, basic life insurance, children’s orthodontia, and optional voluntary benefits.
Flexible Paid Time Off policy.
Professional Development opportunities specific to the role.

Preferred Qualifications

Experience with firewall and network security platforms (examples listed): Palo Alto Networks; Cisco ASA / Cisco Secure Firewall; Fortinet FortiGate; Check Point; Juniper SRX; SonicWall; Cisco Meraki; Sophos; WatchGuard; Microsoft Azure network security technologies; Amazon Web Services network security technologies.
Experience with Zscaler technologies (examples listed): ZIA, ZPA, Zscaler Client Connector, ZDX, Zscaler Cloud Firewall, Zscaler DLP, Zscaler traffic forwarding technologies, Zscaler API integrations and automation.
Experience with Netskope technologies (examples listed): Netskope One SASE, Netskope One SSE, CASB, Next Generation Secure Web Gateway (SWG), Private Access, Cloud Firewall, SD-WAN, SkopeAI.
Understanding or experience with cloud networking and security technologies within Microsoft Azure, AWS, and GCP would be helpful.
Experience with cloud networking concepts such as Virtual networks/VPCs, subnets, route tables, security groups, cloud firewalls, VPN gateways, private connectivity, cloud routing, and hybrid network connectivity.
Familiarity with wireless network security, troubleshooting, and design.
Familiarity with SNMP monitoring and alerting solutions.
Familiarity with network monitoring and performance-management platforms.
Familiarity with packet capture and network troubleshooting tools.
Familiarity with network automation.
Familiarity with REST APIs, PowerShell, and/or Python.
Familiarity with infrastructure scripting or automation.
Relevant networking, security, firewall, cloud, Netskope, or Zscaler certifications are a plus but not required, with preference for active and actively maintained certifications (examples listed): Zscaler ZDTA or ZDTE; Netskope NCCSI (NSK200), Netskope NCCSA (NSK300), or Netskope SASE Accreditation; Cisco CCNA or CCNP; Palo Alto Networks CSA or CSP; CompTIA Network+ or Security+.

Position Overview

Supports the administration, implementation, troubleshooting, design, and ongoing improvement of customers’ networks and security environments.
Works across operational and project-based activities including customer requests, incidents, service tickets, troubleshooting, implementations, migrations, upgrades and changes, and technical projects.
Must communicate effectively, manage competing priorities, adapt to different technical requirements, and see issues through to resolution due to support across multiple customers and environments.
Hybrid and mostly remote, with potential time in office (downtown Salt Lake City) for troubleshooting, updating, and replacing network equipment; client visits as required.
Some rotational on-call time is required and described as not extensive.

View full job page →

2d ago

Network Security Engineer Master

Govcio LLC Remote 🇺🇸 Remote

Remote

2d ago

$125k - $150k/yr Full time Ai Security Cloud Platforms Cloud Security

Apply Now

Job Description

GovCIO LLC is seeking a Network Security Engineer to lead the design, operation, troubleshooting, and continuous improvement of enterprise network security infrastructure. This fully remote role is based in the United States and centers on Palo Alto Networks next-generation firewall capabilities alongside Panorama management, high availability operations, enterprise switching, and advanced logging and security-event correlation.

The role involves owning critical network security components end to end, including centralized firewall administration, zero-trust style security policy governance, segmentation and microsegmentation strategies, and deep troubleshooting across firewall and switching layers. You will also support incident investigations with telemetry from Cortex XSIAM and Strata Logging Service, while partnering with SOC teams to improve visibility and response procedures.

Key Responsibilities

Lead the design, deployment, administration, and lifecycle management of Palo Alto Networks NGFW environments running PAN-OS.
Own centralized firewall management using Palo Alto Panorama, including device groups, templates, template stacks, policy inheritance, upgrades, configuration backups, log monitoring, and firewall onboarding.
Design and govern security policies using zero-trust, least-privilege, application-aware, and risk-based principles.
Configure and troubleshoot security zones, NAT, virtual routers, static and dynamic routing, IPsec VPN, GlobalProtect, decryption, URL Filtering, Threat Prevention, WildFire, DNS Security, and App-ID policies.
Lead enterprise network segmentation and microsegmentation initiatives using security zones, VLANs, subinterfaces, virtual routers, routing controls, and application-based security policies.
Develop secure traffic controls for communications among users, servers, applications, management networks, guest networks, and IoT/OT devices, as well as data-center workloads and cloud resources.
Architect, configure, test, and troubleshoot Palo Alto High Availability deployments, including Active/Passive and Active/Active designs.
Resolve complex HA failures involving HA1 control link issues, HA2 session/state synchronization problems, HA3 packet forwarding failures, peer communications, configuration synchronization, monitoring failures, split-brain prevention, and failover recovery.
Plan and execute HA failover testing, PAN-OS upgrades, disaster-recovery exercises, and maintenance procedures while minimizing service impact.
Troubleshoot HA infrastructure dependencies, including cables, transceivers, switch ports, port channels, VLANs, routing, MTU, latency, packet loss, and redundant-path failures.
Lead configuration, support, and troubleshooting of Cisco Catalyst and Nexus switching environments.
Design and support VLANs, trunking, STP/RSTP/MST, EtherChannel/port channels, HSRP/VRRP, Layer 2/Layer 3 switching, ACLs, QoS, switch security, routing, and access-control technologies.
Diagnose complex connectivity and performance issues using firewall logs, session inspection, packet captures, CLI diagnostics, switch counters, flow data, and network-monitoring platforms.
Analyze TCP/IP behavior, including handshake failures, SYN/SYN-ACK/ACK flow, retransmissions, resets, timeouts, asymmetric routing, MTU/MSS issues, fragmentation, latency, packet loss, and NAT translation problems.
Verify packet flow across firewall policy, App-ID, routing, NAT, decryption, threat prevention, VPN, switching, and server/application layers.
Monitor firewall management-plane and dataplane health, including CPU, memory, session capacity, packet buffers, throughput, logging, and interface performance.
Integrate Palo Alto NGFWs and Panorama with Strata Logging Service and Cortex XSIAM.
Ensure reliable firewall log forwarding, cloud logging, log ingestion, data normalization, event availability, retention, and telemetry quality.
Use Cortex XSIAM and XQL Search to investigate, correlate, and respond to firewall, endpoint, identity, cloud, and third-party security events.
Partner with SOC teams to tune detections, investigate alerts, develop response procedures, improve visibility, and support incident containment and remediation.
Lead root-cause analyses for major network or security incidents and deliver corrective and preventive action plans.
Develop and maintain network diagrams, firewall-policy documentation, HA designs, runbooks, change plans, architecture standards, and operational procedures.
Mentor junior engineers and provide technical leadership during projects, production incidents, and security reviews.

Required Qualifications

Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field (three additional years if Bachelor’s degree); equivalent relevant experience may be considered.
10+ years of progressive experience in network engineering, network security, firewall administration, or security infrastructure operations.
6+ years of hands-on Palo Alto Networks firewall experience in a production enterprise environment.
Advanced operational experience with Palo Alto Panorama, including multi-device policy management, templates, device groups, upgrades, configuration management, and troubleshooting.
Strong hands-on experience designing, maintaining, and troubleshooting Palo Alto High Availability environments.
Advanced understanding of HA1, HA2, HA3, configuration synchronization, session synchronization, failover behavior, link monitoring, path monitoring, peer health, and recovery processes.
Strong expertise in TCP/IP, IPv4/IPv6, DNS, DHCP, ARP, routing, NAT, VPNs, and packet-level troubleshooting.
Demonstrated ability to investigate TCP handshakes, resets, retransmissions, MTU/MSS issues, asymmetric routing, connection timeouts, and firewall session behavior.
Extensive experience with Cisco Catalyst and/or Cisco Nexus switching technologies.
Strong knowledge of enterprise switching and routing, including VLANs, trunking, STP/RSTP/MST, EtherChannel, HSRP/VRRP, routing protocols, ACLs, QoS, and switch-security controls.
Proven experience designing or implementing network segmentation and microsegmentation solutions.
Working knowledge of Cortex XSIAM, Strata Logging Service, security-event correlation, alert investigation, XQL Search, and firewall log ingestion.
Ability to lead technical design discussions, independently manage complex workstreams, and communicate risks and recommendations to technical and nontechnical stakeholders.
Strong documentation, change-management, incident-management, and root-cause-analysis skills.
Clearance Required: Ability to obtain and maintain a Public Trust clearance.

Technologies

Palo Alto Networks, PAN-OS, Palo Alto Panorama, HA1, HA2, HA3
Cisco Catalyst, Cisco Nexus, GlobalProtect, IPsec VPN
Cortex XSIAM, Strata Logging Service, XQL Search, WildFire, App-ID, URL Filtering, Threat Prevention, DNS Security, NAT
STP, RSTP, MST, EtherChannel, HSRP, VRRP, VLANs, QoS, MTU, MSS
Python, Ansible, Terraform, REST APIs
Prisma Access, Prisma Cloud, Cortex XDR, Cortex XSOAR
Cisco ISE, Cisco ACI, SD-Access
Fortinet Security Fabric, FortiGate, FortiManager, FortiAnalyzer
AWS, Azure, Google Cloud Platform, SIEM, SOAR, EDR/XDR, vulnerability-management, NDR, network-monitoring, ticketing platforms

Compensation and Location

Salary: USD 125,000 - 150,000 per year
Location: Fully remote in the United States

View full job page →

Network Security Analysis Engineer Jobs

Network Security Engineer

Network Security Engineer Master

Get Network Security Analysis Engineer Jobs alerts