Sr. Information Security Analyst

What You'll Do

• Sound understanding of Networking and Network Security Technologies.
• Extensive experience with Firewall and VPN Technologies.
• Hands-on experience with Firewalls (Palo Alto, Cisco ASA, Checkpoint, and Fortinet).
• Detailed technical experience in the installation, configuration, and operation of high-endfirewall appliances, ideally Palo Alto Networks® products.
• Strong understanding of core Internet protocols and applications.
• Experience with Cisco Routers, Switches, AAA, and TACACS.
• Research, evaluate, develop, and implement security solutions and standards followingindustry best practices.
• Ensure that current and planned technical solutions are compatible with the company'sbusiness needs and strategic objectives.
• Operate the production environment security toolsets and services.
• Work with other teams to design, develop, and implement Enterprise Security solutions insupport of development, test, and production environments.
• Provide technical security expertise and assistance to other IT and business groups.
• Perform security audits and testing; evaluate system security configurations to ensureefficacy and compliance with policies and procedures.
• Support the information security operations team. 🔧 Security Automation (Mandatory for T3) Design, develop, and maintain automation frameworks for firewall policy lifecyclemanagement — including rule creation, modification, review, cleanup, and compliancevalidation.
• Automate security policy deployment and enforcement across multi-vendor firewallplatforms (Palo Alto, Cisco ASA, Checkpoint, Fortinet) using APIs, SDKs, andinfrastructure-as-code tooling.
• Build and maintain automated policy audit pipelines to continuously detectmisconfigured, redundant, shadowed, or non-compliant firewall rules.
• Develop scripts and workflows to integrate security platforms (SIEM, SOAR, firewalls,vulnerability scanners) for automated detection, alerting, and response.
• Automate threat intelligence ingestion to dynamically update block lists, URL filteringpolicies, and access controls across perimeter and cloud security controls.
• Create self-service automation tooling that enables other IT and business teams to request,validate, and track security policy changes with minimal manual intervention.
• Leverage SOAR platforms (e.g., Palo Alto XSOAR, Splunk SOAR) to build playbooks thatautomate incident triage, enrichment, and response workflows. 🤖 AI Tools & Security Intelligence (Preferred / Strong Plus) Ability to leverage AI-assisted policy analysis tools to identify risky, unused, or over-permissive rules and recommend optimizations.
• Familiarity with using large language models (LLMs) and AI coding assistants (e.g.,GitHub Copilot, Claude, ChatGPT) to accelerate automation script development,documentation, and policy analysis.
• Experience with AI-driven SIEM/SOAR capabilities to reduce alert fatigue throughintelligent correlation and automated enrichment.
• Understanding of the security risks introduced by AI tools within the enterprise and theability to define policies and guardrails around their usage.
• Competency Skills Required Strong planning, organization, and time management skills.
• Clear and concise technical and business communication — listening, speaking, andwriting.
• Strong troubleshooting, problem-solving, and critical thinking skills.
• Customer service and stakeholder management skills.
• Automation-first mindset — ability to identify repetitive manual processes and drive themtoward scalable automated solutions.
• Qualifications and Special Skills Required Bachelor's degree in Science or Engineering preferred, or equivalent combination ofeducation and relevant experience. 10–15 years of experience with security processes and solutions.
• Strong understanding of current security threats, techniques, and the threat landscape;self-driven desire to research current and emerging threats.
• Deep knowledge of Firewalls and VPN Technologies.
• Conceptual and practical understanding of IT Infrastructure designs, technologies,products, and services, including applicable Information Security concepts.
• Ability to work both in a group setting and independently.
• Experience with IT ticketing systems.
• Strong scripting and automation skills — Python, PowerShell, Bash (Mandatory for T3) ;experience with REST APIs and automation frameworks (Ansible, Terraform, or similar).
• Experience with a Security Information and Event Management (SIEM) platform.
• Strong understanding of Wireshark, as well as Linux/UNIX and Windows-based operatingsystems.
• Knowledge of system log forensics (Syslog, Event Viewer).
• Strong working knowledge of Network Security concepts and technologies: Building and maintaining network security devices for WAN, LAN, VPN, and WiFi.
• Firewalls (Palo Alto, Cisco, Checkpoint).
• Network packet inspection and forensics.
• Intrusion detection and prevention systems (IDS/IPS).
• TCP/IP, computer networking, routing, and switching protocols.
• DNS, Internet policy enforcement, web content filtering.
• Preferred Certifications Certified Information Systems Security Professional (CISSP) SANS GIAC certifications (GCIA, GCFW, GPEN, or similar) Palo Alto Networks (PCNSE) Cisco ASA / CCNP Security Checkpoint (CCSE) AWS/Azure/GCP Security Specialty (cloud security automation) Palo Alto XSOAR Engineer or similar SOAR platform certification We’re doing work that matters.
• Help us solve what others can’t.