Role Overview :

We are seeking a skilled Network Security Engineer to design, deploy, and manage our cloud security infrastructure using Cisco Umbrella. In this role, you will be the primary subject matter expert responsible for protecting our global workforce from internet-based threats. You will ensure secure web gateway connectivity, DNS-layer protection, and cloud access security broker (CASB) policies are seamlessly integrated into our network.

Key Responsibilities :

- Deployment & Architecture : Design, configure, and deploy Cisco Umbrella across corporate networks, roaming devices, and remote branch offices (SD-WAN integration).

- Policy Management : Create, maintain, and optimize DNS-layer security policies, Secure Web Gateway (SWG) rules, content filtering, and SSL decryption exceptions.

- Threat Mitigation : Analyze Cisco Umbrella security reports, identify compromised endpoints, and mitigate malware, ransomware, botnets, and phishing attempts.

- Integrations : Connect Cisco Umbrella with existing security tools, including SIEM platforms (Splunk, QRadar), Cisco Secure Endpoint (AMP), and Active Directory for identity-based policies.

- Cloud Security (CASB) : Utilize Cloud Access Security Broker features to discover shadow IT, control cloud application usage, and enforce data loss prevention (DLP) strategies.

- Troubleshooting : Diagnose and resolve complex DNS routing, network latency, VPN conflict, and certificate deployment issues related to the Umbrella roaming client.

- Monitoring & Reporting : Build automated threat dashboards and deliver regular security posture reports to senior leadership.

Technical Skills :

- Primary Tool : Hands-on experience with Cisco Umbrella (Multi-org console, Roaming Computers, Virtual Appliances, and AnyConnect integration).

- Networking Protocol : Deep understanding of DNS (records, routing, Anycast), DHCP, TCP/IP, routing protocols (BGP, OSPF), and SSL/TLS decryption.

- Security Infrastructure : Knowledge of Next-Generation Firewalls (NGFW), Secure Access Service Edge (SASE) architecture, and Proxy servers.

- Identity Management : Experience linking security policies with Active Directory (AD), Azure AD/Entra ID, or Okta.

- Other Skills : Strong analytical mind with a proactive approach to threat hunting. Excellent technical documentation and communication skills. Ability to work effectively under pressure during security incidents.

Qualifications & Experience :

- Experience : 3 - 6 years of dedicated experience in Network Security or Cloud Security engineering.

- Education : Bachelors degree in computer science, Cyber Security, Information Technology, or equivalent practical experience.

- Certifications (Preferred) : Cisco Certified Network Associate (CCNA), Cisco Securing the Web with Cisco Umbrella (300-725 SWSA), CompTIA Security+, CEH.