Cyber Security Engineer

Cyber Security Engineer

Location: Brookfield, WI, US

Industry: Financial services

Work Setting: Hybrid

Are you a cybersecurity professional with expertise in network security, firewall administration, cloud security, automation, and enterprise infrastructure support?

The Cyber Security Engineer is responsible for securing and supporting enterprise network and security infrastructure, including next-generation firewalls, secure connectivity solutions, cloud environments, web security platforms, and cybersecurity operations. This role partners with security architects, operations teams, cloud engineers, and infrastructure teams to deliver secure, resilient, and scalable security solutions while supporting a large, distributed enterprise environment.

The ideal candidate combines expertise in Palo Alto Networks, Zscaler, AWS, Azure, network security, threat prevention, automation, and incident response with strong troubleshooting and operational support capabilities.

Key Responsibilities

Network Security Administration

• Administer, configure, and maintain Palo Alto Networks Next-Generation Firewalls (NGFW).
• Manage and optimize:
• Security Policies
• NAT Rules
• URL Filtering
• Content Filtering
• Threat Prevention Services
• Ensure enterprise security controls are aligned with business and compliance requirements.
• Support ongoing firewall optimization and rule management.

Secure Connectivity & VPN Management

• Design, implement, and maintain secure remote connectivity solutions.
• Support enterprise VPN infrastructure including:
• Site-to-Site VPNs
• Client VPNs
• Secure Remote Access
• Implement and manage encryption and decryption technologies.
• Troubleshoot secure connectivity issues across enterprise environments.

Zscaler Security Administration

• Manage and support Zscaler Secure Web Gateway (SWG) services.
• Implement internet access controls and security policies.
• Configure traffic inspection and web security controls.
• Troubleshoot internet access and secure web gateway issues.
• Partner with senior engineers on complex security incidents.

Tier 3 Security & Network Support

• Serve as an escalation point for advanced cybersecurity and networking issues.
• Provide Tier 3 support for:
• Connectivity Problems
• Security Incidents
• Internet Access Issues
• Firewall Issues
• VPN Issues
• Support a large-scale enterprise environment spanning thousands of users and locations.
• Ensure critical services remain available and secure.

Data Center & Enterprise Infrastructure Security

• Support highly available and resilient data center environments.
• Ensure secure network segmentation and interconnectivity.
• Design and maintain redundancy and failover capabilities.
• Protect critical business applications and infrastructure.

Areas of Focus

• Network Segmentation
• Data Center Security
• High Availability
• Enterprise Connectivity
• Infrastructure Resilience

Cloud Security Engineering

• Implement and support cloud security controls in:
• Amazon Web Services (AWS)
• Microsoft Azure
• Secure hybrid and cloud-native environments.
• Support cloud networking and access control frameworks.
• Ensure cloud infrastructure aligns with enterprise security standards.

Incident, Change & Problem Management

• Manage operational activities through ServiceNow.
• Support:
• Incident Management
• Change Management
• Service Requests
• Problem Management
• Follow ITIL processes and SLA commitments.
• Participate in incident resolution and post-incident reviews.

Vendor & Technical Support Coordination

• Collaborate with external vendors and support organizations including:
• Palo Alto TAC
• Zscaler Support
• AWS Support
• Azure Support
• Escalate and resolve advanced production incidents.
• Coordinate troubleshooting and remediation efforts.
• Ensure timely issue resolution.

Security Automation & Engineering

• Develop automation solutions to improve operational efficiency.
• Build scripts and tools to streamline security operations.
• Reduce manual effort through automation initiatives.
• Improve consistency and reliability of security processes.

Programming & Scripting

• Python
• PowerShell
• Bash
• JavaScript
• Java

Security Tool Development & Management

• Build, manage, and maintain enterprise cybersecurity tools and infrastructure.
• Enhance visibility and operational effectiveness within cybersecurity operations.
• Support continuous improvement initiatives.
• Integrate security tools across infrastructure platforms.

Threat Research & Security Innovation

• Monitor emerging security threats and vulnerabilities.
• Research new attack methods and exploit techniques.
• Evaluate evolving security technologies and methodologies.
• Share findings and recommendations with engineering and security teams.
• Contribute to proactive security improvements.

Security Collaboration & Risk Management

Partner with:

• Security Architects
• Security Operations Center (SOC)
• Incident Response Teams
• Infrastructure Engineering Teams
• Application Development Teams
• Cloud Engineering Teams

Responsibilities

• Risk Identification
• Security Improvements
• Incident Analysis
• Security Metrics Reporting
• Remediation Planning

Security Metrics & Reporting

• Track and report security testing results.
• Develop meaningful risk-based security metrics.
• Support enterprise reporting initiatives.
• Provide security performance insights to stakeholders.
• Assist leadership with risk visibility and decision-making.

Qualifications

Education

Required

Bachelor's Degree in:

• Computer Engineering
• Cybersecurity
• Information Technology
• Computer Science
• Related Technical Field

Experience

Required

• Minimum 2 years of experience as a:
• Cyber Security Engineer
• Security Engineer
• Network Security Engineer
• Related Security Role

Technical Skills

Network Security

Required

• Palo Alto Networks Firewalls
• Firewall Administration
• Proxy Technologies
• Active Directory
• Threat Prevention
• Network Security Controls

Networking

Required

• DNS
• IP Networking
• NAT
• VLANs
• Subnetting
• Routing Concepts
• Secure Connectivity

Cloud Platforms

Required

Experience with one or more:

• Amazon Web Services (AWS)
• Microsoft Azure

Focus Areas

• Cloud Security
• Hybrid Cloud Architecture
• Secure Networking
• Identity & Access Controls

Programming & Automation

Required

• Python
• JavaScript
• Java

Preferred

• PowerShell
• Bash

Security Technologies

Required

• VPN Technologies
• Encryption & Decryption Technologies
• Secure Web Gateway (SWG)
• Zscaler
• Security Monitoring

IT Operations

Required

• Agile Methodologies
• DevOps Practices
• ITIL Processes
• ServiceNow

Professional Competencies

• Cybersecurity Engineering
• Security Operations
• Problem Solving
• Incident Response
• Technical Troubleshooting
• Risk Management
• Communication Skills
• Collaboration
• Continuous Learning
• Process Improvement

Core Competencies

• Cyber Security
• Network Security
• Palo Alto Networks
• Zscaler
• AWS Security
• Azure Security
• VPN Management
• Firewall Administration
• Threat Prevention
• Secure Web Gateway
• DNS
• NAT
• VLANs
• Subnetting
• Python
• PowerShell
• JavaScript
• DevOps
• ITIL
• ServiceNow