01Overview
Role Summary :We are seeking a highly experienced Network Security Lead to own and drive enterprise network and cyber security strategy, architecture, and operations. The role demands strong expertise in CyberArk PAM, Firewalls, SD-WAN, DLP, SIEM, SOAR, and enterprise monitoring solutions. The ideal candidate will combine deep technical skills with leadership capabilities to manage complex security environments and guide teams toward a mature security posture.Key Responsibilities :1. Network & Security Architecture :- Lead the design, implementation, and optimization of secure network architecture across on-prem, cloud, and hybrid environments.- Define and enforce network security standards, segmentation models, and zero-trust principles.- Ensure resilience, scalability, and availability of security infrastructure.2. Firewall & SD-WAN Management :- Own implementation and operations of Next-Generation Firewalls (NGFW) such as Palo Alto, Fortinet, Cisco, Check Point, etc.- Design and manage firewall rulesets, NAT, IPS/IDS, VPNs (site-to-site and remote access).- Lead deployment, migration, and optimization of SD-WAN solutions (Cisco, Fortinet, VMware, Silver Peak, etc.).- Integrate SD-WAN with security controls including firewalls, cloud security, and monitoring platforms.- Ensure secure connectivity between data centers, branches, and cloud environments.3. Privileged Access Management (CyberArk) :- Own and manage CyberArk PAM solutions including PVWA, CPM, PSM, and EPM.- Implement privileged access lifecycle management, password vaulting, session monitoring, and compliance reporting.- Lead CyberArk onboarding, integrations, upgrades, and operational governance.4. SIEM & SOAR :- Lead SIEM platform operations (ArcSight, Sentinel, etc.) including onboarding of firewall, SD-WAN, and security device logs.- Define and optimize correlation rules, dashboards, alerts, and compliance reporting.- Drive SOAR automation for incident response, threat containment, and remediation workflows.5. Data Loss Prevention (DLP) :- Design and manage DLP controls for data at rest, in use, and in transit.- Partner with legal, compliance, and business teams to balance security and usability.6. Threat Detection & Incident Response :- Lead network and security incident response including firewall breaches, lateral movement, and data exfiltration attempts.- Perform threat hunting, root cause analysis, and post-incident improvements.- Coordinate with SOC teams, vendors, and senior leadership during critical events.7. Monitoring, Governance & Compliance :- Oversee enterprise security monitoring and alerting for network and security platforms.- Ensure adherence to ISO 27001, NIST, PCI-DSS, SOX, GDPR, and regulatory requirements.- Support audits, vulnerability assessments, penetration tests, and risk assessments.8. Leadership & Stakeholder Engagement :- Lead, mentor, and grow a team of network and security engineers.- Act as a trusted advisor to IT and business leadership on network security risks and roadmap.- Manage security vendors, service providers, and technology partners.Required Skills & Qualifications :1. Technical Skills :- 8-10 years of experience in Network & Cyber Security.- Strong hands-on experience with Next-Generation Firewalls (NGFW).- Proven experience in SD-WAN design, deployment, and operations.- Expert knowledge of CyberArk PAM solutions.- Strong SIEM experience with log ingestion from network, firewall, and SD-WAN platforms.- Experience with SOAR, security automation, and orchestration.- Deep understanding of DLP technologies.- Strong networking fundamentals (TCP/IP, routing, switching, DHCP, DNS).- Cloud and cloud-network security experience (AWS/Azure/GCP) is a plus.2. Soft Skills :- Strong leadership, mentoring, and team-building skills.- Excellent communication and stakeholder management.- Analytical mindset with strong problem-solving abilities.- Ability to lead under pressure during security incidents.3. Certifications (Preferred) :- CISSP, CISM, CCSP.- CyberArk PAM Certifications.- Firewall/Network Certifications (PCNSE, NSE, CCNP Security, etc.).- Cloud Security Certifications (Azure/AWS).4. Nice to Have :- SOC transformation or large-scale security modernization experience.- Zero Trust and Secure Access Service Edge (SASE) exposure.- Experience with UEBA, CASB, EDR/XDR.- Automation and scripting (Python, PowerShell). (ref:hirist.tech) .
