Yoda Tech is seeking an experienced Network Security Engineer to lead network security operations, manage security incidents, and maintain secure network infrastructure in a 24 x 7 operational environment.

The ideal candidate will have strong hands-on experience with enterprise firewalls, VPN technologies, IDS/IPS, and Zscaler ZIA/ZPA.

The role requires proven shift leadership capabilities, incident response expertise, threat detection skills, and a strong understanding of network security best practices.

Key Responsibilities :

1. Shift Leadership & Incident Response :

- Lead network security operations during assigned shifts, manage escalations, and ensure compliance with service-level agreements (SLAs).

- Investigate and respond to network security threats, including DDoS attacks, lateral movement, and unauthorized access.

- Execute incident response playbooks and document root cause analysis (RCA) reports.

- Coordinate with relevant technical teams to ensure timely incident resolution and service continuity.

2. Network Security Operations :

- Configure, monitor, troubleshoot, and maintain enterprise firewalls, including Palo Alto, Fortinet, and Check Point.

- Administer and troubleshoot VPN solutions to ensure secure remote and site-to-site connectivity.

- Manage IDS/IPS systems and optimize detection accuracy.

- Implement network segmentation and support zero-trust security principles.

- Review firewall configurations and access rules to maintain a strong network security posture.

3. Zscaler Administration :

- Administer and troubleshoot Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) policies.

- Monitor security logs and alerts to identify suspicious activities and potential threats.

- Optimize security policies in coordination with network and infrastructure teams.

- Investigate access-related issues and ensure secure web and application connectivity.

4. Threat Detection & Hunting :

- Conduct network-based threat hunting using network flow analysis, packet captures, and threat intelligence.

- Analyze network traffic to identify anomalies, suspicious connections, and potential security breaches.

- Tune IDS/IPS signatures and Zscaler policies to reduce false positives and improve threat detection.

- Support proactive threat identification and continuous improvement of security monitoring processes.

5. Reporting & Compliance :

- Prepare network security reports covering firewall rule audits, VPN usage, security incidents, and threat trends.

- Maintain accurate incident records, operational documentation, and shift handover reports.

- Support compliance initiatives aligned with ISO 27001 and the NIST Cybersecurity Framework.

- Assist with security audits, risk assessments, and remediation activities.

Required Qualifications & Skills :

- 5 - 8 years of experience in Network Security, Security Operations Centre (SOC), or Incident Response.

- Hands-on experience with enterprise firewalls, VPN technologies, IDS/IPS, and Zscaler ZIA/ZPA.

- Proven experience leading shifts in a 24 x 7 network security operations environment.

- Strong understanding of TCP/IP, routing, switching, and network protocols.

- Experience investigating security incidents, performing root cause analysis, and managing escalations.

- Knowledge of network segmentation, access controls, and zero-trust security principles.

- Experience analysing network traffic, security logs, and threat intelligence.

- Strong communication, documentation, reporting, and problem-solving skills.

Tools & Technologies :

- Firewalls : Palo Alto, Fortinet, Check Point

- IDS/IPS : Snort, Suricata, Cisco Firepower

- Zero Trust & Secure Access : Zscaler ZIA, ZPA

- VPN : IPsec, SSL VPN

- Network Analysis & Monitoring : Wireshark, NetFlow, Zeek

Nice-to-Have Skills :

- Experience with cloud network security across AWS, Microsoft Azure, or Google Cloud Platform (GCP).

- Familiarity with DDoS mitigation, proxy security, Data Loss Prevention (DLP), and network forensics.

- Relevant certifications such as CCNP Security, PCNSE, Zscaler Certified Professional, CompTIA Security+, or CompTIA CySA+.

Key Performance Indicators :

- Mean Time to Detect (MTTD) and Mean Time to Resolve (MTTR) security incidents.

- Compliance with firewall rule audits and security policies.

- VPN availability and secure access SLA compliance.

- Threat detection accuracy and reduction in false-positive alerts.

- Timely incident escalation, resolution, and documentation.