Cybersecurity Sr. Engineer — Atlanta, GA

Req198329

Key Responsibilities

• Design automation workflows and capabilities in support of data collection, investigation and incident response.

• Develop threat hunting and data analysis strategy and capabilities.

• Identify and propose new technologies, methodologies and/or approaches to detecting malicious activity.

• Utilize indicators to scope and respond proactively to emerging threats.

• Design, build, configure, maintain and monitor cybersecurity threat defense capabilities and user access management.

Minimum Qualifications

• Must be eighteen years of age or older.

• Must be legally permitted to work in the United States.

• Bachelor’s degree in Computer Science, Computer Engineering, Information Technology, or a related field and 5 years of progressive, post baccalaureate experience in a related occupation. Requires 5 years of experience in the following skills:

• Deploying, configuring, and managing modern stateful and next-gen firewalls, including configuring App-ID, User-ID, Content-ID (IPS/IDS, malware prevention, URL filtering), and building robust Security/NAT policies.

• Deploying and managing Palo Alto Next-Gen firewalls - both hardware and virtual series such as PA-5400s and PA-7080s

• Managing legacy environments such as “Juniper SRX 5400” and “Cisco ASA and Netscreens”

• Translating legacy config/policy rule-sets into modern, application-aware rulesets during hardware refreshes or vendor migrations.

• Managing large scale enterprise advanced routing frameworks such as SDWAN hub and spoke setups via Palo Alto firewalls.

• Managing external routing, likely peering with ISPs or connecting large WAN infrastructures and cloud environments, involves understanding autonomous systems (AS), route filtering, prefix lists, and path manipulation.

• Designing and troubleshooting complex Site-to-Site (IPsec) and Remote Access (SSL/TLS, GlobalProtect, AnyConnect) VPN tunnels across multiple data center platforms for availability.

• Modern Palo Alto firewall management using Panorama 11.0 to push configuration templates, manage Device Groups, aggregate logs, and orchestrate firmware/software upgrades across hundreds of firewalls simultaneously.

• PAN-OS features, web interface changes, and advanced routing engine capabilities.

• Advanced log management such as configuring firewalls and routers to forward Syslog data to Splunk, writing SPL (Search Processing Language) queries to hunt for security threats, tracking allowed/denied traffic patterns, and building automated alerts for anomalous behavior.

• Business Intelligence (BI) and reporting such as complex network and security data (potentially ingested from Splunk or direct APIs) and building high-level dashboards to track bandwidth utilization, threat metrics, or compliance reporting for leadership.

• Deep packet inspection (DPI) skills and ability to capture .pcap files, filter through TCP/UDP headers, analyze three-way handshakes, spot asymmetric routing, and definitively prove where a connection is dropping or experiencing latency.