Description
byteSpark.ai is recruiting on behalf of our client for a highly skilled Infrastructure Security Specialist to strengthen the client’s network security operations. The role focuses on operational security and compliance of the client’s infrastructure, including configuring and administering Fortinet Next-Generation Firewalls (policy management, IPS/IDS, SSL inspection), managing WAF rules aligned with OWASP, monitoring security logs with escalation to the client’s SOC, coordinating vendor updates, driving vulnerability remediation, supporting compliance audits, and maintaining rigorous documentation. You’ll work extensively with Fortinet, Infoblox, and Nutanix to ensure a robust, secure environment, supporting 8×5 operations with on-call availability for critical incidents.
Requirements
1. Minimum of 3 years of hands-on experience with Fortinet NG-FW, including policy creation, IPS/IDS configuration, and SSL inspection.
2. Proven experience in managing Web Application Firewall (WAF) policies with a strong understanding of OWASP top ten vulnerabilities.
3. Proficiency in monitoring firewall logs, analyzing traffic, and escalating security incidents to a Security Operations Center (SOC).
4. Demonstrated experience in supporting vulnerability remediation workflows and participating in compliance audits (e.g., PCI-DSS, ISO 27001).
5. Strong understanding of network infrastructure, including secure DNS (Infoblox) and Remote Access VPN solutions.
6. Practical experience with Nutanix/NCP and Fortinet Switches.
7. Excellent skills in documenting configurations, network diagrams, and maintaining detailed change logs.
Desirable
1. Experience in coordinating multi-vendor firmware updates and security patching.
2. Familiarity with security audit readiness and evidence collection/handling.
3. Understanding of SOC collaboration processes and incident response playbooks.
4. Preferred Certifications: Fortinet NSE4/NSE7, Nutanix Certified Professional (NCP), CISSP or CISM.
5. Experience with scripting or automation for security tasks.