L2- Senior Security Engineer

Job Description: Senior Security Engineer (Ops) – Grade 2

Position Overview

• Job Title: Senior Security Engineer (Ops)


• Grade: 2


• Department/Group: Managed Services


• Position Type: Permanent


• Job Location: Thane


• Working Days: Monday – Friday


• Working Hours: 9:00 AM to 6:30 PM

Position Summary

The Security L2 Engineer will be responsible for supporting the day-to-day operations of enterprise security infrastructure in a multi-vendor, hybrid managed services environment. The role requires hands-on experience in network security incident handling, Next-Generation Firewall operations, VPN support, network security policy troubleshooting, change implementation, and operational monitoring.
The ideal candidate will provide Level 2 operational support across security platforms, ensure timely resolution of incidents and service requests, and work closely with internal teams, vendors, and clients to maintain secure and reliable services.

Roles and Responsibilities

• Provide Level 2 operational support for enterprise security infrastructure and ensure network security incidents and service requests are resolved within defined SLAs.


• Monitor, investigate, and troubleshoot issues related to firewalls, VPNs, secure web access, proxy, AAA, and IDS/IPS solutions.


• Support day-to-day administration and operational management of Next-Generation Firewall (NGFW) platforms.


• Assist in implementing and validating firewall policies, NAT rules, VPN configurations, access control changes, and security object updates.


• Troubleshoot security policy, connectivity, authentication, and access-related issues, escalating complex cases to L3 teams when required.


• Perform routine health checks, monitoring, and basic performance analysis of security devices and services.


• Support incident investigation, root cause identification, and problem resolution for recurring operational issues.


• Maintain accurate documentation of incidents, troubleshooting steps, service requests, configuration changes, SOPs, and knowledge base articles.


• Coordinate with L1 teams, L3 engineers, network teams, vendors, and internal stakeholders for issue resolution and service continuity.


• Communicate effectively with clients and internal teams by providing updates on incidents, service requests, escalations, and planned changes.


• Participate in shift handovers, operational reviews, and knowledge-sharing sessions to ensure continuity and service quality.


• Ensure operational activities are aligned with security standards, governance processes, audit requirements, and change management procedures.


• Contribute to continuous improvement initiatives by identifying opportunities to enhance operational efficiency and service delivery.

Knowledge, Skills, and Experience Requirements

• Experience: 3–6 years of relevant experience in Security Operations / Firewall Operations / Managed Security Services.


• Platform Expertise: Hands-on experience with one or more NGFW platforms and SSE Solutions, such as Palo Alto, FortiGate, Cisco FTD, Versa SSE / Cisco SSE.


• Core Technical Understanding:
  
  
  
  
  • Firewall policy management, NAT, VPN (Site-to-Site / Remote Access), IDS/IPS, AAA, Secure Internet / Remote Access Technologies, MFA.
  
  
  • Troubleshooting security policy, access, authentication, and connectivity issues.
  
  
  
  


• Networking Fundamentals: Working knowledge of TCP/IP, DNS / DHCP, VLANs, Subnetting, Ports and Protocols.


• Operational Skills:
  
  
  
  
  • Exposure to ticketing tools, monitoring tools, and ITIL-based operational processes.
  
  
  • Experience working in a multi-vendor and hybrid managed services environment.
  
  
  • Strong analytical, troubleshooting, and communication skills.
  
  
  • Exposure to log analysis, traffic analysis, and packet-level troubleshooting.
  
  
  • Familiarity with audit, compliance, and governance support activities.
  
  
  
  

Qualifications, Certifications, and Education Requirements

• Education: Preferred Bachelor of Engineering, or any Graduation.


• Preferred Certifications:
  
  
  
  
  • Fortinet NSE / FCP
  
  
  • PCNSA / PCNSE
  
  
  • CCNA / CCNP Security
  
  
  • Cisco Security Certifications
  
  
  • Other relevant Firewall / Security Operations / SSE certifications