Network Security Specialist

We're looking for a Network Security Specialist to manage and evolve our firewall and network security estate, primarily built on Check Point and Cisco platforms. This role sits at the intersection of network engineering and security. You'll be hands-on with policy management, troubleshooting, and architecture, while working closely with our Infosec Manager on broader security initiatives. This is not a strict Information Security role - we're prioritizing strong technical depth in firewalling and networking over formal InfoSec credentials. If you're a network engineer with serious firewall chops, we want to hear from you.

Responsibilities Manage, configure, and troubleshoot Check Point firewalls (policy, NAT, VPN, SmartConsole)

Administer Cisco network infrastructure (switches, routers, ASA where applicable)

Design and implement firewall rule changes following change management processes

Monitor firewall/network performance and proactively resolve issues

Support network segmentation, VPN (site-to-site and remote access), and routing configurations

Participate in security incident response from a network/firewall perspective

Document network topology, firewall rulesets, and standard operating procedures

Collaborate with the Infosec team on vulnerability remediation and hardening initiatives

Assist with audits and compliance requirements relating to network security controls

Solid hands-on experience with Check Point firewall management (CCSA/CCSE certification a plus)

Strong working knowledge of Cisco networking (routing, switching, VPN); CCNA/CCNP a plus

Understanding of core networking concepts: TCP/IP, VLANs, routing protocols (OSPF/BGP), NAT

Experience troubleshooting complex network/security issues under pressure

Familiarity with VPN technologies (IPsec, SSL VPN)

Basic understanding of security principles (least privilege, segmentation, logging)

Good documentation habits and clear communication skills

Comfortable working in a fast-paced, hands-on environment

Nice to Have Exposure to other firewall/security vendors (Fortinet, Palo Alto)

Scripting/automation experience (Python, Ansible) for network tasks

Experience with SIEM tools or log analysis

Cloud networking exposure (AWS/GCP)