SecOps Security Engineer (L3) – Check Point, Palo Alto & Fortinet firewalls

About the role

We are seeking an experienced SecOps Security Engineer (L3) to join a large‑scale 24x7 Security Operations centre. The role focuses on managing and hardening enterprise firewall platforms and supporting incident response across multiple locations.

Key responsibilities

• Administer, troubleshoot and optimise Check Point, Palo Alto and Fortinet firewalls, including policy, ACL, NAT and rule‑base management.
• Manage and support WAF, IPS, VPN, MFA and proxy security technologies.
• Investigate security alerts, perform root‑cause analysis and drive remediation actions.
• Analyse logs from firewalls, endpoints and other security infrastructure to identify operational issues.
• Support enterprise EDR, DLP and antivirus platforms, handling policy administration and troubleshooting.
• Conduct firewall rule reviews, security assessments, configuration audits and vulnerability remediation.
• Participate in incident, change and problem management within an ITSM framework.
• Maintain SOPs, technical documentation, configuration records and operational reports.

Required profile

• 7–10 years of experience in Security Operations, Network Security or a related cybersecurity function.
• Proven experience supporting large‑scale enterprise security environments.
• Hands‑on expertise with at least one major firewall platform (Check Point, Palo Alto or Fortinet).
• Experience with WAF, IPS, VPN, MFA, proxy and endpoint security technologies.
• Familiarity with vulnerability management, security hardening, audits and compliance activities.
• Ability to work effectively in a 24x7 Security Operations environment.

Required skills

• Check Point firewall administration
• Palo Alto Networks firewall administration
• Fortinet firewall administration
• Web Application Firewall (WAF)
• Intrusion Prevention System (IPS)
• Virtual Private Network (VPN) configuration
• Multi‑Factor Authentication (MFA) integration
• Proxy security solutions
• Endpoint Detection & Response (EDR) platforms
• Data Loss Prevention (DLP) solutions
• Antivirus/anti‑malware tools
• Network Address Translation (NAT) and Access Control Lists (ACL)
• IT Service Management (ITSM) processes