Security Specialist

Introduction
At IBM work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so lets talk.

Your Role and Responsibilities
Who you are:
We are actively seeking an experienced and highly skilled resource to join our elite cybersecurity team. In this role you will play a critical part in shaping and implementing advanced security strategies to safeguard our organization against sophisticated cyber threats.

What you’ll do:
Primary Responsibility:

• Must have hands-on experience in Cloud MPLS VPN firewalls.
• Address security incidents related to firewalls.
• Monitor and analyze firewall logs for security incidents.
• Investigate and respond to alerts related to firewall activities.
• Configure manage and monitor firewall rules and policies.
• Conduct regular review/assessment to ensure firewall security and compliance.
• Design and implement advanced firewall configurations and policies.
• Firewall patch or firmware upgrade as needed
• Conduct regular security assessments to identify and mitigate potential vulnerabilities.
• Building and maintaining knowledge of next-generation firewalls and firewall solutions
• Maintaining current deployments and helping deploy new ones
• Working closely with the customer Cyber Security team members and project managers
• Creating high-level and low-level designs
• Performing maintenance and changes in firewalls as required
• Implementing new firewalls as required
• Assisting with troubleshooting network connectivity as it relates to firewalls.
• Utilizing change management request and ticketing systems
• Documenting status updates and problem resolutions
• Perform operational activities to maintain to all types of Firewall systems including backup health check patching configuration BCP testing etc.
• Support the administration and troubleshooting of VPN connections.
• Work closely with the team to ensure secure remote access through VPN solutions.
• Monitor VPN connections for unusual activities and potential threats.
• Investigate and respond to VPN-related security incidents.
• Administer and troubleshoot VPN connections for secure remote access.
• Implement and maintain VPN configurations for optimal security.
• Lead the design and implementation of secure VPN solutions.
• Evaluate and enhance VPN security protocols and practices.
• Perform maintenance and changes in firewalls
• Implement new firewalls
• Assist with troubleshooting network connectivity
• Use change management request and ticketing systems
• Document status updates and problem resolutions
• Perform validation of the load balancer and firewall rules
• Configure VPN tunnel for MFA implementation
• Implement VPN tunnel to allow access to specific services through MFA
• Perform network monitoring and troubleshooting
• Troubleshoot hardware and software on workstations

Secondary Responsibility:

• Good to have knowledge in DDoS WAF NAC Link & Server Load Balancer CSPM CNAPP.
• Able to implement and manage basic NAC solutions.
• Provide support for device access control measures.
• Monitor NAC systems for unauthorized access attempts.
• Utilize CSPM (Cloud Security Posture Management) tools particularly Prisma for cloud security posture assessments and management.
• Monitor WAF alerts and incidents to protect web applications.
• Investigate and respond to security incidents involving WAF.
• Deploy and manage WAF solutions to protect web applications from cyber threats.
• Monitor and respond to DDoS attacks implementing mitigation strategies.
• Collaborate with network teams for DDoS protection.
• Implement and manage Distributed Denial of Service (DDoS) protection measures.
• Provide support for load balancing measures.
• Monitor and manage link and server load balancers for optimal performance and security.
• Investigate and respond to incidents involving load balancing.

How we’ll help you grow:
You’ll have access to all the technical and management training courses you need to become the expert you want to be.
Our team leads love to mentor in case of technical difficulty.
You have the opportunity to work in many different areas to figure out what really excites you

Required Technical and Professional Expertise

• Hands-on experience required in Firewall MPLS Firewall Cloud Firewall VPN gateway.
• Desired experience in DDoS WAF NAC Link & Server load balancer CSPM CNAPP.
• Worked on tools belongs to CISCO Pulse secure Palo Alto Juniper Radware Forescout Prisma.
• Must have desire to learn or cross skill with new technologies.
• Must be able to work in morning evening and night shifts – Mandatory.
• Bachelor’s degree in engineering/information security or a related field.
• Relevant certifications such as CEH CISSP CISM CompTIA CASP+ or equivalent.
• Proven experience to work in a SOC environment.
• Deep technical knowledge of security technologies and advanced threat landscapes.
• Proven experience in managing and responding to complex security incidents.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration abilities.
• Ability to work in a fast-paced dynamic environment.

Preferred Technical and Professional Expertise

• None