Cyber Security Engineer with Firewall / NYC ( Onsite ), Long Term

Cyber Security Engineer-FIREWALLThe job opening is for an experienced, hands-on senior security engineer/architect that will design, configure, implement, and support security controls in a growing enterprise environment. The security engineer responsibilities will include leading security projects involving LAN, WAN, IoT, OT, Office 365, Datacenter, Wireless, Cloud, endpoints etc.Responsibilities:Architect security controlsExpert knowledge of firewall including firewall administration and configuring security policiesKnowledge of penetration testingUse red team skills to find security violations in the infrastructurePerform security risk assessments of applications, cloud services, and networksConfigure security policies for IDS/IPS, WAF, DNS, Reverse and forward Web Proxy server, CASBTroubleshoot level 3 security related issues.Architect and configure cloud security controls and VMWare environmentUtilize SEIM, Armis, Extrahop and Secureworks for threat intelligence and incidence responseLead the resolution of security incidentsWorking knowledge of Proxy Web GatewayReview and triage vulnerability alerts into manageable reports, provide relevant analysis, suggest mitigation procedures, track remediation, and identify gaps.Application security experienceLead security education and awareness activitiesAnalyze the network and implement solutions to increase uptime efficiency and securityWork with vendors to integrate security platforms into infrastructureConfigure security policies in DNS and WAFImplement DLP controlsManage Disaster Recovery, Incident Management, and Business Continuity activitiesRequirements:5 years or more of Security Engineering experience in a complex enterprise environmentStrong network security experienceStrong knowledge of network architecture and designStrong project management experienceMust be able to lead projectsBachelor's degree in computer science, information technology or related field.Should be able to utilize security frameworks like NIST and MITRE.Proficient in the use of security management tools to facilitate troubleshooting, e.g., Wireshark, NetBrain, Extrahop, NetWitness, CoreInsight etc.Experience in some of these application security related tools: Burp Suite, Fortify, Zimperium, Veracode, HCL AppScan toolsExperience in Netwrix data classification and auditing toolExperience with Trellix EPO and CrowdstrikeExperience with Skyhigh Proxy Gateway and CASBExperience with Menlo Security web and email isolation toolConfigure security policies in DNS and WAFKnowledge of data privacy regulations and compliance issues especially related to HIPAAStrong understanding of network, application, and cloud securityKnowledge of Identity and Access ManagementExperience with configuring DNS. Familiarity with Infoblox to maintain public facing DNS services as well as IPAMUnderstanding of the various VPN technologiesKnowledge of security of wireless environment including controllers and Client.Knowledge of resilient designs to ensure high availabilityKnowledge of IPS/IDS design as standalone hardware or as a feature within firewallsUnderstanding of IoT and OT securityAbility to create reports using KRI and KPIExperience with Next Generation Firewalls including Palo alto, Fortinet, etc.Coding experience is a plusWork with vendors, carriers, and other technical groups to implement new security controls and troubleshoot existing controlsAny automation experience is a plus