| Network Security Engineer---NY at Remote, Remote, USA |
| Email: harsh.kashyap@tekinspirations.com |
|
From: harsh kashyap, tek inspirations harsh.kashyap@tekinspirations.com Reply to: harsh.kashyap@tekinspirations.com Job Description - Network Security Engineer 2 spots. 1 interview next week and offer! Must have old LinkedIn ( 2020) Position Overview: We are seeking a network-savvy professional to manage and review network access requests, ensuring compliance with security policies and best practices. This individual will act as a bridge between application teams and network security, evaluating requests for validity, security risks, and technical feasibility. The role does not require deep network engineering expertise but does require a strong understanding of networking fundamentals, common ports and protocols, and the ability to assess risk in firewall change requests. Key Responsibilities: Review and validate network access requests from application owners, developers, and other teams. Engage with requestors to clarify their needs and ensure requests are specific, reasonable, and adhere to security policies. Identify high-risk or overly broad requests (e.g., requests for /8 network access, "any-any" firewall rules) and push back with more appropriate alternatives. Collaborate with the network security team to document approved exceptions and maintain records of security exceptions. Assist requestors in finding alternative solutions, such as leveraging proxies instead of direct firewall openings. Ensure that request approvals do not become a bottleneck by efficiently processing and escalating as needed. Work closely with Subject Matter Experts (SMEs) for escalations when needed. Provide guidance to teams unfamiliar with network security policies and best practices. Ideal Candidate Background: Networking Knowledge: A solid grasp of common networking principles, including subnets, firewalls, routing, and protocols like HTTP, HTTPS, SSH, and RDP. Security Awareness: Understanding of security best practices, including the principle of least privilege, network segmentation, and firewall rule implementation. Communication Skills: Ability to engage with non-technical requestors and explain why certain requests are denied or need modification. Problem-Solving: Capable of assessing alternative approaches to network access issues (e.g., using proxies instead of opening firewall rules). Attention to Detail: Ability to document requests and maintain organized records of approved exceptions. Team Collaboration: Comfortable working with network engineers, security teams, and application owners. Common Request Scenarios: Overly Broad Requests: A developer requests /8 access from a development network to production. This should be rejected, and a more precise access request should be recommended. Unnecessary Firewall Changes: A team requests an outbound firewall rule to communicate with an external service when a proxy solution would work. The candidate should recognize this and suggest the proxy alternative. Cross-Security Zone Access: A lower-security zone is requesting access to a higher-security zone (e.g., dev network to a production network with PII). This must be carefully evaluated. Undefined Requests: A team submits a vague request without clear justification or technical details. The candidate should engage with the requestor to refine the request. Additional Notes: This is not a pure networking role but rather one that sits at the intersection of networking and security policy enforcement. The right candidate does not need to be a senior network engineer but should have enough knowledge to recognize bad practices and steer teams toward secure and efficient solutions. Keywords: Network Security Engineer---NY harsh.kashyap@tekinspirations.com https://jobs.nvoids.com/job_details.jsp?id=2302285 |
| harsh.kashyap@tekinspirations.com View All |
| 01:23 AM 01-Apr-25 |