Network Security Engineer

CTC: 10k QAR to 12k QAR

Job Summary:

The Network Security Engineer is responsible for designing implementing and managing secure network infrastructures to protect enterprise environments from cyber threats. This role requires deep expertise in firewalls intrusion detection and prevention systems (IDS/IPS) VPNs and network security frameworks to ensure robust protection against evolving security threats.

Key Responsibilities:

• Network Security Architecture & Implementation:
  • Design and deploy secure network architectures for enterprise and cloud environments.
  • Implement and configure firewalls IDS/IPS VPNs and Web Application Firewalls (WAFs).
  • Ensure secure network segmentation access control policies and encryption mechanisms.
• Threat Detection & Incident Response:
  • Monitor and analyze network traffic for anomalies and security breaches.
  • Deploy and manage SIEM solutions for realtime threat detection and log correlation.
  • Work with SOC teams to respond to security incidents and mitigate threats.
• Firewall & Perimeter Security Management:
  • Manage and optimize nextgeneration firewalls (NGFW) from vendors such as Palo Alto Cisco Fortinet and Check Point.
  • Configure SSL/TLS decryption DDoS protection and URL filtering policies.
  • Conduct regular security audits and firewall rule reviews.
• Cloud & Hybrid Security:
  • Implement and secure cloud networking solutions in AWS Azure and GCP.
  • Design Zero Trust Network Access (ZTNA) models for cloud and onpremise environments.
  • Integrate cloud security solutions such as CASB CSPM and cloudnative firewalls.
• Network Security Compliance & Risk Management:
  • Ensure compliance with industry standards such as NCSA/QCERT ISO 27001 NIST 80053 GDPR and PCIDSS.
  • Conduct network vulnerability assessments penetration testing and security hardening.
  • Develop security policies procedures and best practices for secure network operations.
• Automation & Network Security Monitoring:
  • Implement network automation using Ansible Terraform and Python for security configurations.
  • Deploy network monitoring tools such as SolarWinds PRTG and SNMPbased monitoring solutions.
  • Utilize AIdriven security analytics and threat intelligence platforms.
• Stakeholder Collaboration & Security Training:
  • Work closely with IT DevOps and security teams to integrate security into network operations.
  • Provide security awareness training for employees and IT teams.
  • Assist in incident response tabletop exercises and cybersecurity drills.

Qualifications & Experience:

• Education: Bachelor’s or Master’s degree in Cybersecurity Computer Science or related field.
• Experience: Minimum 710 years in network security engineering and cybersecurity operations.
• Certifications:
  • Cisco Certified CyberOps Professional or CCNP Security.
  • Certified Information Systems Security Professional (CISSP) Preferred.
  • Certified Ethical Hacker (CEH) or GIAC Certified Intrusion Analyst (GCIA).
  • Fortinet NSE 4 or Palo Alto PCNSA/PCNSE.
• Technical Skills:
  • Strong expertise in firewalls IDS/IPS VPNs and NAC solutions.
  • Handson experience with SIEM SOAR and endpoint security solutions.
  • Proficiency in network security automation and scripting.
  • Knowledge of Zero Trust microsegmentation and network access control (NAC).
  • Experience in forensic analysis packet capturing and deep packet inspection.