Level III Network Security Engineer - Remote

Description:

Spartech Solutions LLC is an Independent Supplier of IT Hardware and Support Services for all IT Solutions. We offer a wide variety of Enterprise Hardware Solutions and specialize in many hard-to-find spare parts as well as Professional Services that are sure to fit your needs. Spartech Solutions was founded with the goal of putting a “Personal Touch” on a business relationship and specializing in excellent service.

With a combined 25+ years of experience in the IT community, we are a rapidly growing new company with a very experienced and dedicated staff. We pride ourselves on our grassroots mentality and friendly, open staff.

Spartech is sure to be an industry leader within its core product lines. In a market where price is an issue, Spartech rises above the bar, and not only offers competitive prices, but provides outstanding detailed customer service, priding itself on a unique style of doing business by selling more than just IT products.

Job Description

Spartech is seeking up to four (4) candidates to work for one of our global clients in a Network Security Engineer along with other team members to provide around-the-clock "Follow The Sun" coverage. The positions are remote working inside client environments to respond to escalated tickets, alerts and incidents which require a Level III Experienced Network Security Engineer.

Candidates must comply with client SLAs and Priority Levels. Client will supply company laptops for candidate use. Successfully hired personnel shall comply with all clients' acceptable-use, security, data-handling, and access policies.

Candidates shall not use non-client-managed devices or unauthorized tools to access the clients' environments, systems, or data. Candidates will follow all guidelines and protocols in these matters. Upon commencement of employment and client orientation, qualified candidates are expected to be free-thinking and self-sufficient, with little escalation to Level IV Management.

Core Responsibilities

Network Security:

• Design, implement, and manage network security solutions, including firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), and network access control (NAC).
• Analyze network traffic for potential security threats and vulnerabilities.
• Develop and enforce network security policies, procedures, and standards.

Email Security:

• Configure and manage secure email gateways to protect against phishing, spam, malware, and other email-based threats.
• Implement and maintain email encryption protocols.
• Conduct regular security assessments and audits of email systems.

Endpoint Security:

• Deploy and manage endpoint security solutions, including antivirus, antimalware, EDR (Endpoint Detection and Response), and DLP (Data Loss Prevention) tools.
• Ensure endpoint devices are compliant with security policies and have the latest security patches and updates.
• Respond to and mitigate endpoint security incidents.

Vulnerability Management:

• Develop and manage vulnerability management programs, including regular scanning, assessment, and remediation.
• Collaborate with IT teams to prioritize and address vulnerabilities based on risk and impact.
• Track and report on the status of vulnerability remediation efforts.

Cloud Security:

• Implement and manage security controls across various cloud platforms (e.g., AWS, Google Cloud, Microsoft Azure).

Ensure the security of cloud-based infrastructure, applications, and services.

QUALIFICATIONS

• Experienced security professional with a strong background in networking, infrastructure, and security, ideally gained in organizations of various sizes and through working in multiple roles with diverse technologies and products.
• Understanding of core principles of how modern infrastructure technologies operate (such as virtualization of computing and networking, containers, cloud computing, SaaS, PaaS etc) and the security aspects of these technologies
• Solid understanding of the operation of LAN/WAN IP-based networks (TCP/IP, routing/switching, VLANs, NAT, DNS, DHCP)
• Understanding of principles of applied cryptography - symmetric/asymmetric encryption, hashing, SSL/TLS, SSH, PKI, IPSec, site-to-site/remote access VPN, disk encryption, HSM
• Understanding of attack vectors against modern enterprises: phishing, ransomware, malware, DoS/DDoS, drive-by, MITM, various type of injection (i.e. SQL), cross-site scripting, etc.; methods of defense from these attacks
• Knowledge of common security principles, concepts, and methods (authentication, authorization, single sign-on, network segregation, DMZ, Zero Trust, defense-in-depth, penetration testing, sandboxing etc.)
• Ability and desire to code, script and automate in order to improve own and team's operational efficiency
• Understanding of aspects of application delivery in principle and firewalling/load balancing in particular
• Understanding of HTTP operation and associated concepts (its methods, cookies, sessions, caching, CDNs, HTTP-based applications and protocols etc)
• Understanding of principles of operation of NextGen/L7 firewalls and experience with one of the market-leading vendors
• Practical knowledge of Windows (including AD) and Linux
• Knowledge of SSL/TLS traffic handling and encrypt/decrypt policies.
• Team-player who enjoys working in a collaborative and collegial environment and is an active contributor as part of a global team
• Ability to work calmly under pressure and meet deadlines and solve problems requiring creativity, initiative and drive; self-motivated and enjoys a sense of pride in their accomplishments
• Ability to present ideas in a user-friendly, business-friendly and technical language
• Strategic self-starter with an innovative mindset and outstanding attention to detail

Requirements:

• Ability to meet all of the above items in the Description and Responsibilities.
• Ability to exceed client requirement for SOC-2 and ISO-27001 for auditing and compliance.
• Pass without incident via InterPol and other client background screening
• Minimum of Six (6) Years in Network Security Position, with strong Subject Matter Expert (SME) in one or more of the following: Network, Endpoint, Email, Cloud Security
• Vendor Hardware and Software Certifications are highly desired, but not absolutely necessary based on experience.
• High-level understanding of Network Stack and components.
• Well versed in configuration, upgrading, troubleshooting of Palo Alto, Fore Scout, DarkTrace, and CroudStrike.
• Document all findings for refining processes, and for historical trending issues to hone procedures to improve processes