Job Description

Our client is seeking a Network Security Analyst to support and enhance its enterprise network security environment. This role focuses on monitoring, analyzing, and optimizing security technologies while improving detection capabilities, policy effectiveness, and overall security posture. The ideal candidate has experience working in a SOC or enterprise operations environment and enjoys using data to drive security improvements.

Responsibilities

• Monitor and analyze network security platforms to identify trends, risks, and opportunities for improvement.
• Review and optimize firewall, web application firewall (WAF), proxy, and other network security policies to improve effectiveness and reduce false positives.
• Develop and maintain SIEM use cases, alerts, dashboards, and reports to improve threat detection and visibility.
• Perform threat hunting and detection engineering using network and security telemetry.
• Investigate security events, analyze logs and network traffic, and support incident response activities.
• Partner with infrastructure, engineering, and security teams to implement policy improvements and automation initiatives.
• Build reports and metrics that communicate security posture and operational trends to technical and business stakeholders.
• Identify opportunities to automate security workflows using scripting and other tools.
• Maintain documentation, security standards, and operational procedures.
• Stay current on emerging threats, attack techniques, and security best practices.

Required Qualifications

• 5+ years of experience in a Cybersecurity or Network Security Analyst role within an enterprise SOC or security operations environment.
• Hands-on experience with Palo Alto firewalls, Zscaler, and Imperva (or comparable WAF technologies).
• Experience performing firewall and security policy tuning and rule optimization.
• Strong experience with Splunk (or another SIEM), including SPL query development, alerting, dashboards, and reporting.
• Experience with threat hunting and detection engineering.
• Strong understanding of network protocols, traffic analysis, and common attack techniques such as lateral movement, command-and-control (C2), and data exfiltration.
• Experience with security tools such as FireMon, BackBox, RSA, SolarWinds, Wireshark, and ServiceNow.
• Familiarity with the MITRE ATT&CK framework.
• Working knowledge of Microsoft Entra ID and Active Directory.
• Experience with scripting or automation using Python, PowerShell, or similar languages.
• Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications

• Security certifications such as GSEC, GCIA, GCDA, CCSP, or CISSP.
• Experience working in large enterprise or hybrid cloud environments.
• Ability to communicate technical findings and recommendations to both technical and non-technical audiences.