Network Segmentation Analyst

Job Description

Job Description

Position Summary

We are seeking a thorough and proactive Network Segmentation Analyst to support a workstream within our network segmentation program. The ideal candidate will have 2–5 years of experience analyzing large data sets consisting of both log and telemetry data to formulate network-based security policies in support of cyber network segmentation. Success in this role includes producing validated application flow maps and enabling enforcement of least-privilege network policies. As a valued team member, you will help ensure secure and compliant access across network boundaries, with a solid understanding of routing, firewall, and IDS/IPS controls.

• Analyze network traffic data (NetFlow, logs, packet captures) to identify application communication patterns and dependencies.

• Develop and refine network segmentation policies aligned with security standards and Zero Trust principles.

• Partner with engineering, cybersecurity, and application teams to validate dependencies and enforce least-privilege connectivity.

• Translate flow data and CMDB information into application dependency mappings.

• Support implementation and tuning of policies across firewalls and security platforms (e.g., Cisco Firepower, IDS/IPS).

• Contribute to governance and compliance activities, ensuring adherence to internal policies and regulatory requirements.

• Document findings, produce reports, and communicate insights to technical and non-technical stakeholders.

• Identify opportunities to improve segmentation effectiveness and reduce the attack surface.

• Bachelor's degree in Information Security, Computer Science, or a related field preferred.

• 2–5 years of hands-on experience in data analysis with a focus on networking and network security.

• Experience supporting enterprise-level network environments.

• Working knowledge of Splunk and Cisco Firepower in an enterprise environment.

• Familiarity with regulatory frameworks such as SOX, HIPAA, ISO 27001, or NIST.

• Strong analytical and problem-solving skills.

• Excellent communication and documentation skills.

• Experience with scripting or automation using PowerShell or Python.

• Experience managing firewall security policies with Cisco Firepower, Check Point, and Juniper.

• Experience with Snowflake and data visualization tools such as Tableau or Power BI.

• Understanding of Zero Trust principles and least-privilege access models.

• Relevant certifications such as CISSP, CISM, or vendor-specific IAM/PAM certifications.