OT Security Analyst

Job Summary

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Key Responsibilities

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Skill Requirements

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations

Other Requirements

Technical skill set • Good hands-on experience in Palo Alto, Panorama, Cisco FTD, Cisco ASA, and Cisco ISE. • Must have hands on experience with Cisco ASA, FXOS, Palo Alto firewalls and Panorama. • Full understanding of Palo Alto Firewall concepts like Security Zones, Security policy ordering, Searching and Sorting Audit logs, Address Sets, negated addresses, User Roles and tables, route-based policies, address-books, Application traffic control etc. • Must have hand on Cisco ISE for VPN authentication, AAA, policy creation. • Understanding and experience with routing protocols • Handson Skill on handling Security Incidents and plan mitigation. • Good understanding of Symantec DLP • Should have good understanding and extensive hands-on experience on various security technologies including Firewalls, VPN\'s, IDS/IPS, end point security solutions (AV, HIPS, Hard Disk Encryption), strong Authentication products (RSA SecurID), Content Security Gateways (Cisco IronPort Web/Mail Security Gateways), Cisco ISE, TACACS/AAA solutions. Hands on experience in more than one technology is preferred • Understanding of F5 load balancers. • Should have good presentation skills - shall be able to participate the review meetings and be able put across the points of concern • Should have Capability to conduct risk analysis, impact analysis, dependencies on customer/internal teams, • Knowledge and experience of working with ITIL (Information Technical Infrastructure Library) Processes Non-Technical Responsibilities • Coordinate with other team members for availability of capable resource • Ensure quality work - review and validate the technical configuration changes • Coordinate with COE (Centers Of Excellence) resources for resolution of technical issues/problems before escalation to OEM (Original Equipment Manufacturers) Technical Responsibilities • Configuration of Cisco and Palo Alto Firewalls • Articulate or highlight risks/dependencies • Participation in an on-call support rotation required • Firewall Auditing and review access control lists and updating firewalls as needed • Interacting with various teams in managing the log management solution. • Adhering to high-quality standards and best practices, high performance, and scalable, repeatable processes and deliverables in accordance with applicable regulations • Analyze, troubleshoot, and investigate network security-related incident based on security platform reporting, network traffic, log files, host-based and automated security alerts • Evaluate systems using vulnerability scanners and manual techniques to verify system security settings and configurations