Job Description - NETWORK SECURITY ENGINEER (230001E4)
Job Description
NETWORK SECURITY ENGINEER - ( 230001E4 )
Description
To apply and configure approved network security policies, configuration, and updates, according to CIBs’ standard operating procedures, information security standards, and compliance requirements.
End Users Daily Operation
1. Configure the network security policies, configuration, and updates assigned on the network security team, in order to ensure seamless business operations according to bank’s standard operating procedures.
2. Resolve network security incidents, and be on top of technical investigations, in order to ensure bank’s network, services and connected devices operational stability, and functionality in adherence with the approved security standards.
3. Implement, Operate, and maintain CIB end to end network security controls covering perimeter, Branches, DMZ, Access layer, 3rd Party and Data Centre firewalls, in order to make sure that a unified and complaint policy applied across the organization.
4. Ensure the availability and efficient operations of banks’ end to end network security solutions such as firewalls, VPNs, Intrusion Detection Systems (IDS), in order to provide the required levels of assurance regarding the effectiveness of banks’ security measures and approved controls.
5. Assist with implementation of CIB’s strategy, roadmap and delivery plans for Network Security in coordination with the Architecture and information security teams.
6. Monitor, report and provide network security manager by network security trends and suggest changes to policy, procedures, and tools in order to enhance the network security posture.
7. Provide technical network security expertise to CIBs’ projects, in order to provide the required levels of assurance regarding the readiness of banks’ security controls.
8. Review and critique network security solutions, in full alignment with network security manager, in order to be able evaluating the alignment with operational and mission requirements over a range of metrics including scalability, maintainability, security, reliability, flexibility, availability, and manageability
9. Manage VPN/remote access connectivity and maintain the availability of the service to avail remote connectivity service to end-users as per the need.
10. Identify, diagnose, and resolve Network Security problems in LAN/WAN/Data Center promptly and efficiently, to ensure that the connection is well functioning at all times.
11. Resolve escalated Service Desk network security issues to guarantee that business services are always reachable.
12. Apply regular health-check on the security appliances in scope to optimize performance and proactively detect possible failures/problems.
13. Deploy network security baseline, audit and PCI related requirements on all network components while abiding by the Change Management Process.
14. Monitor performance of security applications in scope and ensure a healthy and risk-free secure network connectivity through the entire organization.
Policies, Processes and Procedures
15. Follow all relevant department policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner
Day-to-day management
16. Follow the day-to-day operations related to own jobs in the department to ensure continuity of work.
Compliance
17. Comply with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB’s sound legal position and mitigate any potential risks.
Qualifications
Qualifications & Experience
Bachelor’s Degree of Communications / Computer Engineering
For Engineer: Minimum 2 - 4 Years of experience in Data Networking
For Senior Engineer: Minimum 5 - 7 Years of experience in Data Networking
Good Knowledge in Networking, preferably CISCO products and technologies;
o Routing & Switching (Routing protocols such as EIGRP, OSPF, BGP, and Instant Switches)
o Data Center Security Products (Next Generation Firewalls, IPS)
o Network Security techniques (Encryption, ISE, NAC, dot1x, device hardening)
Recommended certifications:
o CISCO Security certificates - (CCNA, CCNP, CCSP, … etc.)
Skills
Good command of English and Arabic languages
Good Communication and Presentation skills
Good Analytical Thinking and Problem Solving skills
Primary Location
: Egypt-Giza-SMART VILLAGE BLDG. 1
Job
: Back Office
Organization
: COO
Shift
: Day Job Job Type : Full-time Employee
Refer a friend for this job
Tell us about a friend who might be interested in this job. All privacy rights will be protected. **
