Job Description

Job Title: SOC Level 3 Analyst a Firewall Specialist

Department:

Cybersecurity / Security Operations Center (SOC)

Reports To:

SOC Manager / Security Engineering Lead

Job Summary:

We are seeking a highly skilled and experienced SOC Level 3 Analyst with deep expertise in firewall technologies and advanced network security. The candidate will be responsible for managing, analyzing, and responding to high level security threats, maintaining and optimizing firewall configurations, and leading incident response efforts related to network perimeter defense.

Key Responsibilities:

Act as the subject matter expert (SME) for firewall systems (e.g., Palo Alto, Fortinet, Cisco ASA/Firepower, Check Point, Juniper).

Perform advanced threat detection, analysis, and triage of security incidents involving firewalls and network perimeter devices.

Monitor, tune, and maintain firewall policies and rules to reduce false positives and improve detection accuracy.

Lead investigations and incident response efforts involving complex network intrusions or firewall evasion techniques.

Conduct firewall rule audits and ensure compliance with internal security policies and external regulations (e.g., PCI DSS, ISO 27001 and NIST).

Collaborate with network and infrastructure teams to implement secure configurations and change management processes.

Develop and maintain detailed documentation of firewall configurations, incidents, and standard operating procedures.

Provide mentorship and guidance to SOC Tier 1 and Tier 2 analysts, assisting with troubleshooting complex firewall related security issues.

Assist with threat hunting initiatives and contribute to continuous improvement of detection capabilities.

Required Skills

Qualifications:

Bachelor's degree in Information Security, Computer Science, or related field (or equivalent work experience).

12+ years of experience in a security operations or network security role, with at least 3 years at SOC L3 level.

Strong experience managing enterprise firewalls (at least one of: Palo Alto, Fortinet, Cisco, Check Point, Juniper).

In depth knowledge of network protocols, TCP/IP, VPN, NAT, and routing concepts.

Familiarity with SIEM tools (e.g., Splunk, QRadar, Sentinel), IDS/IPS systems, and packet analysis tools (e.g., Wireshark).

Understanding of threat intelligence and attack frameworks such as MITRE Telecommunication CK.

Experience with scripting/automation (Python, PowerShell) is a plus.

Relevant certifications: CISSP, CCSE, PCNSE, Fortinet NSE, CCNP Security, or equivalent.

Preferred Qualifications:

Experience working in a 24x7 SOC environment.

Knowledge of cloud firewalls (e.g., Azure NSG, AWS Security Groups, GCP firewall rules).

Exposure to zero trust networking principles.

Familiarity with EDR/XDR platforms and integration with firewall logs.

Work Conditions:

May require shift work or on call support as part of a 24x7 operation.

High pressure environment during incident handling and escalations.

Job Tags

Work experience placement, Shift work

Similar Jobs