Network Security Engineer (Firewell, WAF, NGFW, NDR,anti-DDoS,Cloud, Automation)

Salary: $35,000 – $45,000 per month

Our client is now looking for talent to join their team:

Job duties:

● Security Engineering & Operations: Design, implement, manage, and optimise key network security controls including next-generation firewalls (NGFW), web application firewalls (WAF), anti-DDoS, intrusion detection and prevention systems (IDPS), network detection and response (NDR), API protection, and network security policy orchestration platforms.

● Threat & Vulnerability Management: Proactively identify, assess, and track network security vulnerabilities and configuration weaknesses. Lead and verify mitigation efforts to closure.

● Security Architecture Review: Act as a subject-matter expert, reviewing and advising on the network security design for new IT projects and on-premises/cloud architectures to ensure alignment with the Corporation’s security policies/standards and industry best practices.

● Incident Response & Resilience: Participate in the security incident response process, including on-call support outside regular business hours. Coordinate and execute disaster recovery (DR) drills and security-focused non-functional testing.

● Process & Governance: Develop and maintain relevant security operational procedures, standards, and guidelines. Ensure security operations comply with internal policies and relevant business and legal/regulatory requirements.

● Stakeholder & Vendor Management: Collaborate effectively with internal IT teams, business units, and external vendors to resolve complex technical issues and manage change implementations.

Requirements:

● Bachelor’s degree in Computer Science, Information Technology, or a related field.

● Minimum of 3 years of hands-on experience in network security engineering within a sizable organization.

● Proven technical expertise in NGFW (e.g., Palo Alto, Fortinet, Check Point, HillStone), WAF (e.g., Akamai, Alibaba Cloud Firewall), anti-DDoS, intrusion detection and prevention systems (IDPS), NDR (e.g., Vectra), API protection, and network security policy orchestration platforms (e.g., Tufin), network infrastructure, and related technologies and processes. (Not a must to have all the above experience, but familiar with Firewall is a must)

● Experience with firewall management and analysis tools.

● Professional certifications such as CISSP, CCNA Security, PCNSE, or NSE.

● Familiarity with ITIL frameworks.

● Experience with scripting (Python, PowerShell, Ansible) for automation of security tasks.

● Strong analytical and problem-solving skills, with the ability to work independently under pressure and tight deadlines.

● Excellent interpersonal and communication skills, with fluency in spoken and written English. Proficiency in Mandarin is desirable for liaising with regional teams and stakeholders.