Network Security Engineer

Position: Network Security Engineer (Palo Alto / Microsoft Defender / Purview)

Location: New York, NY (100% Onsite)

Duration: 6 Months

Experience: 6–10 Years

Job Summary

We are seeking an experienced Network Security Engineer to support enterprise security initiatives focused on firewall management, Microsoft Defender, Microsoft Purview, Zero Trust architecture, and network segmentation . The ideal candidate should have strong hands-on experience with Palo Alto Firewalls , enterprise firewall policy management, IDS/IPS, SIEM integration, and Microsoft Security technologies.

Key Responsibilities

• Design, implement, and manage enterprise Network Security solutions.
• Configure and administer Palo Alto Firewalls and Panorama.
• Create, maintain, and optimize firewall rules and security policies.
• Perform firewall rule cleanup and rule-base optimization.
• Configure and tune:
• App-ID
• User-ID
• Content-ID
• IPS/IDS Signatures
• SSL Decryption Policies
• Manage Firepower Management Center (FMC) configurations.
• Integrate firewall logs with SIEM platforms.
• Design and implement secure access control policies.
• Deploy and manage Microsoft Defender Security Suite .
• Configure Attack Surface Reduction (ASR) rules.
• Implement and support Endpoint Detection & Response (EDR) .
• Develop advanced KQL queries for threat hunting and investigations.
• Automate security workflows using Microsoft Defender APIs.
• Improve security posture through Microsoft Secure Score recommendations.
• Design and implement Network Segmentation and Micro-Segmentation strategies.
• Support Zero Trust Architecture and least-privilege access models.
• Perform traffic flow analysis and dependency mapping.
• Collaborate with infrastructure and security teams to reduce lateral movement risks.

Required Skills

• 6–10 years of Network Security experience.
• Strong hands-on experience with:
• Palo Alto Firewalls
• Panorama
• Firewall Policy Management
• Rule Base Optimization
• SSL Decryption
• App-ID, User-ID, Content-ID
• IPS/IDS
• SIEM Integration
• Experience with:
• Microsoft Defender
• Microsoft Purview
• Endpoint Detection & Response (EDR)
• KQL Query Language
• Strong understanding of:
• Network Segmentation
• Micro-Segmentation
• Zero Trust Security
• TCP/IP
• Routing & Switching
• VPN Technologies
• NAC Solutions

Preferred Skills

• Check Point Firewall
• Fortinet Firewall
• Cisco Firepower / FMC
• Cloud Security
• Threat Hunting
• Security Automation
• Microsoft Defender API
• Secure Score
• Azure Security

Education

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or related field.