Network Security Analyst

Job Description

• Reporting directly to the Network Security Operations Manager, the Security Analyst guide business requester to provide understanding of the Firewall flows management process, correctly designing the flow, initiating the request, end to end testing and coordination for troubleshooting as required.
• Part of a team of Flow management who qualify the need of requestor based on application flows requested and fill up Flow request templates with detailed review of technical design in alignment with the Security Policy in all Infrastructure, application and Business projects.
• He should be able to approve request in delegation of Hosting Design and Information Security design for 80% of the requests. In addition to the above, he should track exceptional approvals (20%) to Security
• He is responsible to Track requests progress to the Implementation team, trace approvals and implementation timelines within defined SLA and Validate emergency of requests and make sure respective architecture documentation is aligned with implementation.
• He/She should perform in depth diagnostics and troubleshooting using required Networking tools and Firewall Manager and Skybox Orchestration tools.
• He/She should assist Alstom business users with End to End testing or Troubleshooting of Networking related to Firewall Flow opening
• He /She should be able to reproduce end user issues to verify problems and document steps as Knowledge base for other Support teams and Operations teams in Alstom Network services.
• He/She should ensure any actions performed is in compliance with Alstom IS Security policy regulations.

RESPONSIBILITIES:The Network Security Analyst is Operational support team member for Firewalls under his/her responsibility

• The Security analyst is solution owner for review, validation, implementation and documentation of all flow requests raised in coordination with business requestor in alignment with

Security Architecture and standards

• Architecture validation, against Security Policy
• Exception approvals documentation
• Support level 2 expertise for Application flows design
• He follows and validates the security aspects in Alstom s IT ecosystem involving Forward Proxies, Skybox Orchestration,Reverse proxies,Firewalls,SSL VPN and IPSEC VPN Gateways and Application landscape ( ERP/Finance/Engineering)
• Participate in training session for approval and design activities
• Set-up initial manual tooling (while waiting for industrial tools)
• Improve request template in coordination with DA Risk analysis perform risk analysis and identify mitigation plan when relevant
• Steerco Troubleshooting session with Firewall management supplier for flows implementation with required Incident /Change process associated.

Control Supplier implementation

• You will interact on a regular basis with IS&T E2E PM, Local IS&T Business Partners, Solutions Architects, Functional team and Operations teams
• Logical Post Validation after Implementation
• Policy Overview and Optimization
• Support in Security Compliance /Audit
• IPSEC VPN Tunnel Configuration and Coordination E2E.
• Firewall Policy management and compliance.
• Support Security Incident Investigations
• Handle Emergency Business requests on Flow opening in Priority

Qualifications & Skills:EDUCATION

• Diploma or Bachelor s Degree in Engineering
• IT Support engineer having 5+ years of experience in Firewall Rules implementation , ideally with an basic understanding of IS and Network Security Policy framework

BEHAVIORAL COMPETENCIES:

• AGILE - Act quickly, anticipate, learn and adapt continuously
• INCLUSIVE - Embrace differences and work as a team
• RESPONSIBLE - Keep our commitments towards internal and external stakeholders (employees, customers, passengers, society)

TECHNICAL COMPETENCIES & EXPERIENCE The Network Security Analyst follow and comply with below actions in line with the security policy in all actions involved related to Firewall Flow Implementation Services.

1. Risk analysis perform risk analysis and identify mitigation plan when relevant - 1 Year
2. Skybox Orchestration Tool 2+ years
3. Check Point and Fortinet managers 4 Years
4. Incident management Manage Tickets raised by Alstom end users within configured Response and Resolution SLA 2 to 3 Years
5. Service Request Management Manage Service requests raised and approved by business for implementation as per SOP in place 2 to 3 Years
6. Problem Management Ensure to document RCA and submit corrective and Preventive action on time with remediation 1 Year
7. CSI( Continual Service Improvement) and Tasks automation to improve End user experience Should be aware
8. ITIL Service process /Quality reviews Level 3
9. Operational Support /Process documentation skills Level 3

EXPERIENCE / SKILL SET

• Should have good experience working on Flows implementation on Checkpoint and Fortinet Firewall Managers and operational management.
• Should Have Hands on Experience on Skybox Orchestration Tool.
• Good understanding of security tools and mechanisms (IDS/IPS, antivirus, anti-malware, authentication mechanisms, DNS, IPAM, PKI, encryption, etc.)
• Knowledge of ISO 27002 Security Controls.
• Network Security Basic understanding of all components required for Organization security.

• Language Skills: Proficient in English language
• IT Skills: MS office tools (Word, Excel, PowerPoint) for Reporting
• Able to identify and document specific security issues, propose resolution options, and interpret matters from the perspective of involved stakeholders
• Excellent written/verbal/communication, listening and facilitation skills

Job Segment: Network, ERP, Information Security, User Experience, Technology ,

Keyskills :
networkingasafirewallsrouterscorrectivepreventive actionms office toolsenvironmental impact assessmentssl vpnms officeipsec vpncisco