L2- Senior Security Engineer

Job Description

**Job Description: Senior Security Engineer (Ops) -- Grade 2**

**Position Overview**

* **Job Title:** Senior Security Engineer (Ops)
* **Grade:** 2
* **Department/Group:** Managed Services
* **Position Type:** Permanent
* **Job Location:** Thane
* **Working Days:** Monday -- Friday
* **Working Hours:** 9:00 AM to 6:30 PM

**Position Summary**

The Security L2 Engineer will be responsible for supporting the day-to-day operations of enterprise security infrastructure in a multi-vendor, hybrid managed services environment. The role requires hands-on experience in network security incident handling, Next-Generation Firewall operations, VPN support, network security policy troubleshooting, change implementation, and operational monitoring.

The ideal candidate will provide Level 2 operational support across security platforms, ensure timely resolution of incidents and service requests, and work closely with internal teams, vendors, and clients to maintain secure and reliable services.

**Roles and Responsibilities**

* Provide Level 2 operational support for enterprise security infrastructure and ensure network security incidents and service requests are resolved within defined SLAs.
* Monitor, investigate, and troubleshoot issues related to firewalls, VPNs, secure web access, proxy, AAA, and IDS/IPS solutions.
* Support day-to-day administration and operational management of Next-Generation Firewall (NGFW) platforms.
* Assist in implementing and validating firewall policies, NAT rules, VPN configurations, access control changes, and security object updates.
* Troubleshoot security policy, connectivity, authentication, and access-related issues, escalating complex cases to L3 teams when required.
* Perform routine health checks, monitoring, and basic performance analysis of security devices and services.
* Support incident investigation, root cause identification, and problem resolution for recurring operational issues.
* Maintain accurate documentation of incidents, troubleshooting steps, service requests, configuration changes, SOPs, and knowledge base articles.
* Coordinate with L1 teams, L3 engineers, network teams, vendors, and internal stakeholders for issue resolution and service continuity.
* Communicate effectively with clients and internal teams by providing updates on incidents, service requests, escalations, and planned changes.
* Participate in shift handovers, operational reviews, and knowledge-sharing sessions to ensure continuity and service quality.
* Ensure operational activities are aligned with security standards, governance processes, audit requirements, and change management procedures.
* Contribute to continuous improvement initiatives by identifying opportunities to enhance operational efficiency and service delivery.

**Knowledge, Skills, and Experience Requirements**

* **Experience:** 3--6 years of relevant experience in Security Operations / Firewall Operations / Managed Security Services.
* **Platform Expertise:** Hands-on experience with one or more NGFW platforms and SSE Solutions, such as Palo Alto, FortiGate, Cisco FTD, Versa SSE / Cisco SSE.
* **Core Technical Understanding:**  

* Firewall policy management, NAT, VPN (Site-to-Site / Remote Access), IDS/IPS, AAA, Secure Internet / Remote Access Technologies, MFA.

* Troubleshooting security policy, access, authentication, and connectivity issues.
* **Networking Fundamentals:** Working knowledge of TCP/IP, DNS / DHCP, VLANs, Subnetting, Ports and Protocols.
* **Operational Skills:**  

* Exposure to ticketing tools, monitoring tools, and ITIL-based operational processes.

* Experience working in a multi-vendor and hybrid managed services environment.

* Strong analytical, troubleshooting, and communication skills.

* Exposure to log analysis, traffic analysis, and packet-level troubleshooting.

* Familiarity with audit, compliance, and governance support activities.

**Qualifications, Certifications, and Education Requirements**

* **Education:** Preferred Bachelor of Engineering, or any Graduation.
* **Preferred Certifications:**  

* Fortinet NSE / FCP

* PCNSA / PCNSE

* CCNA / CCNP Security

* Cisco Security Certifications

* Other relevant Firewall / Security Operations / SSE certifications