Network Security Engineer

Job Overview

We are looking for an experienced Network Security Engineer to design, implement, monitor, and support enterprise security infrastructure across on-premises, cloud, and hybrid environments. The ideal candidate should possess strong expertise in next-generation firewalls, SIEM platforms, cloud security, Zero Trust architecture, and modern cybersecurity operations.

The role requires hands-on experience with technologies such as Fortinet, SonicWall, Palo Alto Networks, SIEM solutions, SASE, SD-WAN, endpoint security, and threat detection platforms.

Key Responsibilities

• Design, deploy, and manage enterprise network security solutions
• Configure and administer Fortinet, SonicWall, and Palo Alto firewalls
• Implement and maintain VPNs, IPS/IDS, web filtering, NAT, ACLs, and segmentation policies
• Monitor security events using SIEM, XDR, and SOC monitoring platforms
• Investigate security incidents, perform threat analysis, and support incident response activities
• Manage firewall policies, security rules, and compliance controls
• Implement Zero Trust Network Access (ZTNA) and identity-based security controls
• Support cloud security initiatives across AWS, Azure, and hybrid infrastructure
• Configure and support SD-WAN and Secure Access Service Edge (SASE) solutions
• Conduct vulnerability assessments and remediation activities
• Collaborate with infrastructure, cloud, and application teams to secure enterprise environments
• Maintain security documentation, diagrams, SOPs, and audit records
• Participate in on-call rotations and critical incident handling

Required Skills & Technologies

Firewall & Network Security

• Fortinet FortiGate
• SonicWall
• Palo Alto Networks
• Check Point (preferred)
• Cisco Firepower / ASA
• VPN Technologies (IPSec / SSL VPN)
• IDS/IPS
• Web Application Firewall (WAF)
• NAC (Network Access Control)

Modern Security Technologies

• Zero Trust Architecture (ZTA)
• ZTNA (Zero Trust Network Access)
• SASE (Secure Access Service Edge)
• SD-WAN Security
• SSE (Security Service Edge)
• CASB (Cloud Access Security Broker)
• Micro-segmentation
• Secure Remote Access Solutions

SIEM, SOC & Threat Detection

Experience with one or more:

• Splunk
• QRadar
• Microsoft Sentinel
• LogRhythm
• ArcSight
• Elastic SIEM

Knowledge of

• SOC operations
• Threat hunting
• Log correlation
• MITRE ATT&CK framework
• Incident response
• Threat intelligence integration

Cloud & Infrastructure Security

• AWS Security
• Microsoft Azure Security
• Hybrid cloud networking
• Cloud firewall management
• Security Groups / NSGs
• Identity & Access Management (IAM)

Endpoint & Advanced Security

• EDR/XDR platforms
• CrowdStrike
• Microsoft Defender
• SentinelOne
• Endpoint hardening
• DLP (Data Loss Prevention)
• Email security solutions

Networking Fundamentals

Strong understanding of:

• TCP/IP
• Routing & Switching
• VLANs
• BGP / OSPF
• DNS / DHCP
• Load Balancing
• Network troubleshooting

Automation & Scripting (Preferred)

• Python
• PowerShell
• Bash scripting
• Security automation
• SOAR platforms

Preferred Certifications

• Fortinet NSE / FCP
• Palo Alto PCNSA / PCNSE
• CCNP Security
• CISSP
• CEH
• CompTIA Security+
• Microsoft SC Certifications
• AWS Security Specialty

Education

Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field preferred.

Soft Skills

• Strong analytical and troubleshooting skills
• Ability to work in high-pressure environments
• Excellent communication and stakeholder management
• Strong documentation and reporting abilities
• Proactive mindset with focus on continuous improvement

Experienced network security engineer with firewall, SIEM, cloud security, Zero Trust, VPN, incident response, networking, and troubleshooting expertise; a related bachelor's degree is preferred.

Key Responsibilities

• managing firewalls
• monitoring events
• investigating incidents

Skills & Tools

Fortinet, Fortinet FortiGate, SonicWall, Palo Alto Networks, Check Point, Cisco Firepower, ASA, IPSec, SSL VPN, IDS/IPS, Web Application Firewall (WAF), NAC (Network Access Control), Zero Trust Architecture (ZTA), ZTNA (Zero Trust Network Access), SASE (Secure Access Service Edge), SD-WAN, SSE (Security Service Edge), CASB (Cloud Access Broker), Splunk, QRadar, Microsoft Sentinel, LogRhythm, ArcSight, Elastic SIEM, MITRE ATT&CK, AWS, Microsoft Azure, IAM (Identity and Access Management), EDR/XDR, CrowdStrike, Microsoft Defender, SentinelOne, DLP (Data Loss Prevention), TCP/IP, VLANs, BGP, OSPF, DNS, DHCP, Python, PowerShell, Bash, SOAR

Job Details

• Category: Information Technology
• Seniority: Senior Level
• Commitment: Contract
• Workplace: Remote — Malaysia
• Languages: English

About Uvation

An information technology company providing enterprise network security and cybersecurity solutions. — Industry: Information Technology