SOC Network Engineer

Responsibilities:

The SOC Network Engineer will be a key player in maintaining and improving the security posture of our organization's network infrastructure. This includes:

• Monitor and analyze security events from various sources, including Cisco firewalls (ASA, Firepower), intrusion detection/prevention systems (Sourcefire, Snort), and network behavior analysis tools (Stealthwatch, NetFlow).
• Investigate security alerts, perform deep-dive packet analysis using tools like Wireshark, and correlate events to identify potential security incidents.
• Utilize Cisco security technologies (ISE, ACS, Umbrella) to enforce network access control, endpoint security, and secure web gateways.
• Configure and manage Cisco security appliances, including firewalls, VPN concentrators, and intrusion prevention systems.
• Develop and implement security policies and procedures for Cisco network devices, ensuring compliance with industry best practices and regulatory requirements.
• Implement and manage secure SD-WAN solutions, ensuring the confidentiality, integrity, and availability of critical data across geographically dispersed locations.
• Secure VoIP infrastructure and communications, implementing measures to protect against denial-of-service attacks, call interception, and other VoIP-specific threats.
• Design and implement QoS policies to prioritize critical network traffic, including voice and video, ensuring optimal performance and user experience.
• Contribute to the development and implementation of SDN solutions, focusing on security aspects such as micro-segmentation, network virtualization, and centralized security policy management.
• Troubleshoot network connectivity and performance issues related to security devices and configurations.
• Participate in incident response activities, including containment, eradication, recovery, and post-incident analysis.
• Conduct vulnerability assessments and penetration testing, focusing on Cisco infrastructure and applications.
• Contribute to the development and maintenance of security documentation, including network diagrams, incident reports, and knowledge base articles.