We are seeking experienced L3 Security Engineers to join our team in Bhubaneswar. This senior technical role focuses on managing and securing enterprise networks through Next-Generation Firewalls (NGFW), Anti-DDoS solutions, and Malware Sandboxing technologies. You will act as the final escalation point for complex security incidents, lead incident response activities, mentor junior engineers, and support the continuous improvement of our security infrastructure.

Key Responsibilities :

- Serve as the Subject Matter Expert (SME) for NGFW platforms such as Palo Alto and Check Point.

- Deploy, configure, and manage Anti-DDoS solutions (on-premise and cloud-based).

- Tune systems like Arbor to mitigate volumetric and application-layer attacks.

- Monitor threats and optimize defense mechanisms to ensure maximum network uptime.

- Design and implement advanced firewall policies, NAT rules, and secure VPN tunnels.

- Lead incident response as the L3 escalation point for complex security issues.

- Provide mentorship and technical guidance to L1 and L2 security analysts.

- Evaluate and recommend emerging security technologies to enhance the enterprise security roadmap.

- Manage patching, firmware upgrades, and configuration migrations of security infrastructure.

- Maintain and update HLDs, LLDs, and security architecture documentation.

- Develop and maintain SOPs and runbooks for incident handling and response.

- Perform Root Cause Analysis (RCA) and drive corrective actions and improvements.

- Deliver secure architectural designs and engineering solutions for enterprise security.

Qualifications & Experience :

- Bachelors or Masters degree in Computer Science, Information Technology, B.Tech, BE, or BCA

- At least two relevant certifications, such as CEH, CCSE, OEM Firewall certifications (e.g., PCNSE), or Anti-DDoS solution certifications (vendor-specific)

- 5+ years of experience in network or cybersecurity roles, including 2+ years at L3 or senior level

- Experience in enterprise or MSSP (Managed Security Services Provider) environments preferred

Hands-on expertise with :

- Next-Generation Firewalls (Palo Alto, Check Point), Anti-DDoS systems (e.g., Arbor), VPN and NAT configurations, Malware sandboxing, Incident response, IPS, Proxy, SIEM tools, Security architecture design, Patch management, firmware upgrades, Documentation including HLD, LLD, SOPs, Root Cause Analysis (RCA)

- Strong analytical, troubleshooting, communication, and documentation skills