Network Security Policy Analyst

Overview

The Network Security Policy Analyst at ExxonMobil is responsible for designing, engineering, and managing the organization's network security posture to protect critical business operations and data assets. This role focuses on firewall policy management, external network connectivity governance, and secure network architecture design. The analyst collaborates closely with network, infrastructure, application, cloud, and cybersecurity teams to ensure the confidentiality, integrity, and availability of enterprise systems while adapting to evolving cyber threats and business requirements.

Key Responsibilities

Provide consulting and, where necessary, approval for the following areas:

• External Network Connections
• Internal Network Connections
• Stewards and maintain relationships with owners of network connections to ensure controls and risks are appropriately understood and mitigated.
• Define and support policies to enforce required security and best practices for external network connections and network control points.
• Responsible for approval of deviations to accepted required/best practices, including but not limited to new external connections.
• Provide consulting and stewardship for the Enterprise Firewalls Port Opening Request (POR) process

Qualifications

• Hands-on experience in network security.
• Experience in network security technology including Fortinet/Cisco Firewall and IPSec VPN technology.
• Understanding of network security domain and TCP/IP environment.
• Knowledge of various aspects and components of information security such as firewall technology, network authentication technology, encryption methods/standards, VPN, intrusion detection, perimeter security.

Technical Skills

• Deep knowledge of TCP/IP, Internet technologies, IPS/IDS, firewall virtualization, VPNs, NAT, DNS, etc.
• Relevant certifications (preferred but not required): Cisco (CCNA/CCNP Security), Fortinet (FCA/FCSS/NSE), CISSP, GIAC.

Automation & DevOps

• Experience in network automation such as Ansible/Python/REST API/etc will be STRONG advantage

Cloud

• Experience with AWS and Azure network security services.

Soft Skills

• Fluent English communication skills, both verbal and written
• Strong analytical and troubleshooting abilities
• Team-oriented mindset with a proactive attitude to work in a global virtual team environment
• Able to work independently with minimal supervision
• Presentation and interpersonal skills

Top 3 skills

• Network security firewall policy management
• Automation (full stack developer capabilities)
• Cloud (AWS & Azure connectivity)