Security Engineer | Network

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

As a Security Engineer | Network, you will provide design, review, and analysis expertise across the client's firewalls, intrusion prevention, secure web gateway, and remote access controls.

This is a design, review and advisory role. You will work within Expleo's offshore consultancy team, outside the client's operational environment. You will not have access to the client's operational systems or data and will not make live changes. Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on. You will work from information released to the team through Expleo's controlled UK service boundary.

Responsibilities

• Assess firewall, intrusion prevention and gateway change requests for security risk and design quality and prepare change designs for implementation by UK-based personnel.
• Carry out quarterly firewall rule-base reviews (and after significant change) using configuration exports, and report findings and recommendations.
• Analyse network security log and alert reporting monthly, and on request during incidents, and provide recommendations.
• Track intrusion prevention signature (digital vaccine) releases against the 48-hour application target and advise on critical updates, working with the Vulnerability and Patch Manager.
• Contribute to secure web gateway, remote access and CASB policy design and review.
• Review network segmentation and IT/OT boundary controls and recommend improvements.
• Define audit logging requirements for network security devices, in line with the logging design.
• Produce internet access usage and network security reports in the agreed format and to the agreed schedule.
• Maintain network security infrastructure diagrams and configuration documentation.
• Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

• Degree in computer science, networking, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor firewall certification, e.g. PCNSE or Fortinet NSE 4 or above (at least one required).

CompTIA Security+, CySA+, CCNP Security, or an SSE/SASE vendor certification would be advantageous

Essential Skills

• Next-generation firewall design and rule-base review (e.g. Palo Alto, Fortinet, Check Point).
• Intrusion prevention and network detection technologies (e.g. Trend Micro TippingPoint, Cisco Firepower, Darktrace).
• Secure web gateway, SSE/SASE and remote access (e.g. Prisma Access, Zscaler, Netskope).
• TCP/IP, routing, VPN, network segmentation and IT/OT boundary concepts.
• Security log analysis and ITIL change and incident processes.
• Clear written reporting and documentation.

Desirable Skills and Experience

• Rule-base analysis tools (e.g. AlgoSec, Tufin, FireMon).
• Web application firewall and load balancer experience (e.g. F5 BIG-IP).
• OT network security experience (e.g. Nozomi, Claroty) and energy or CNI sector exposure.

Experience

• 4-7 years in network security engineering or operations.
• Experience of firewall rule-base review and change risk assessment in enterprise environments.

• Have the right to work in India.
• Be based in, or willing to relocate to, Chennai.
• Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
• Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
• Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
• Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.

• Collaborative working environment: we stand shoulder to shoulder with our clients and our peers through good times and challenges.
• We empower all passionate, technology-loving professionals to expand their skills and take part in inspiring projects.
• Expleo Academy enables you to acquire and develop the right skills by delivering a suite of accredited training courses.
• Competitive local company benefits [India HR to confirm the benefits package].
• Always working as one team, our people are not afraid to think big and challenge the status quo.

“We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.”

If you are a network security engineer who enjoys analysing complex rule-bases and designing robust controls, we encourage you to apply today.