Network Security Administrator

Job description / Role

Skills - Primary Vectra, Secondary; VPN, IPS, Firewall, Checkpoint/Juniper Primary Responsibilities: • Administration and management of Vectra NDR (Network Detection and Response) platform, including deployment, configuration, tuning, and ongoing maintenance. • Utilize Vectra NDR to monitor and analyze network traffic, detect and investigate security threats, and respond to incidents in real-time to protect the organization's network infrastructure. • Collaborate with security operations teams to develop and implement detection rules, behavioral models, and threat signatures within the Vectra NDR platform to enhance threat detection capabilities. • Conduct regular assessments and audits of Vectra NDR configurations, policies, and rule sets to ensure optimal performance, accuracy, and coverage of security controls. • Investigate security incidents and alerts generated by Vectra NDR, perform root cause analysis, and recommend remediation actions to mitigate risks and prevent future occurrences. • Coordinate with network and system administrators to implement recommended security controls, configurations, and patches based on Vectra NDR findings and recommendations. • Develop and maintain documentation, standard operating procedures (SOPs), and knowledge base articles for Vectra NDR administration, configuration, and incident response procedures. • Provide training and support to security analysts and incident responders on the use of Vectra NDR tools and capabilities, and assist in developing their skills in threat detection and incident response. • Stay updated on emerging threats, vulnerabilities, and attack techniques, and leverage this knowledge to enhance Vectra NDR configurations, rulesets, and response strategies. • Collaborate with cross-functional teams, including network engineering, system administration, and threat intelligence, to integrate Vectra NDR with other security tools and platforms for improved visibility and threat detection capabilities. Secondary Responsibilities: • Assist in the administration and management of firewalls (Checkpoint, Juniper), including rule management, policy configuration, and firewall log analysis. • Support the administration and management of Intrusion Prevention Systems (IPS), including signature updates, policy tuning, and incident response. • Assist in the administration and management of Virtual Private Network (VPN) solutions (e.g., Pulse Connect), including user access management, VPN client configuration, and troubleshooting.

Requirements

Requirements: • Bachelor's degree in Information Security, Computer Science, or related field. • 4-6 years of experience in network security administration, with a focus on Network Detection and Response (NDR) platforms and technologies. • Strong understanding of network security principles, technologies, and protocols, including TCP/IP, DNS, DHCP, VPN, firewalls, and intrusion detection/prevention systems. • Hands-on experience with Vectra NDR platform administration, configuration, and incident response, including deployment in enterprise environments. • Experience with firewall administration and management, including Checkpoint and Juniper platforms, rule management, policy configuration, and firewall log analysis. • Familiarity with Intrusion Prevention Systems (IPS), including signature updates, policy tuning, and incident response. • Experience with Virtual Private Network (VPN) solutions, such as Pulse Connect, including user access management, client configuration, and troubleshooting. • Strong analytical and problem-solving skills, with the ability to analyze complex network security issues, perform root cause analysis, and recommend effective solutions. • Excellent communication and interpersonal skills, with the ability to collaborate effectively with cross-functional teams and stakeholders. • Industry certifications such as Certified Information Systems Security Professional (CISSP), Certified Network Defender (CND), or Certified Ethical Hacker (CEH) are a plus. • Eagerness to learn and adapt to new technologies, methodologies, and best practices in network security administration, and a commitment to continuous improvement and professional development

About the company

Capgemini is a global leader in partnering with companies to transform and manage their business by harnessing the power of technology. The Group is guided everyday by its purpose of unleashing human energy through technology for an inclusive and sustainable future. It is a responsible and diverse organization of 350,000 team members in more than 50 countries. With its strong 55-year heritage and deep industry expertise, Capgemini is trusted by its clients to address the entire breadth of their business needs, from strategy and design to operations, fueled by the fast evolving and innovative world of cloud, data, AI, connectivity, software, digital engineering and platforms. The Group reported in 2022 global revenues of 22 billion.