Network Security Engineer

Are you looking for the chance to work with a leading network security solutions provider as a freelancer/consultant? If so please read on as our client is looking for someone to join on an initial 6 month contract with a view to a potential; long-term appointment.

Job Description:

- Maintain and operate the user database (creation, role assignment, password reset) based on Cisco ACS and OpenLDAP

Audit and help the security enforcement of IP engineering critical server. (using Nexpose and Metasploit).

Follow up with server administrator for correct application of security patch and minimal protection (best security practices of linux server)

Maintain and update the security device: keep up-to-date IPS and security devices. Deployement of new IPS Firepower infrastructure with Cisco fireSIGHT management.

Document and maintain the RIPE and Afrinic database (anti-abuse, reverse DNS, document IP assignation)

Help to provide an accurate documentation of the security infrastructure.

Fill-in tools database for inventory, shipment tracking (hardware token distribution, RMA, ), document links and check connectivity (bandwidth monitoring, error detection, )
Provide end-user support for VPN client connection issue or update/upgrade.

Log analysis and preventive recommendation (DDOS attack, brute force attack on device, ): A CS logs, LDAP logs, Syslogs from IOS devices

Performing analysis of network security needs and contributes to design, integration, and installation of hardware and software

Deploy and maintain Atlas RIPE probe, help for build a web portal for internal use. (sample Python script provided)

Maintain VLAN and security segregation on small datacenter.

Help on the current process of ISO27001 (security) obtention.

Ensure that the company knows as much as possible, as quickly as possible about security incidents undertaking data network fault investigations in local and wide area environments, using information from multiple sources

Skills required:

Hard working and flexible

Open minded

Analytical skills to enable troubleshooting of complex issues

Good knowledge of Cisco device: ASA Firewall, Cisco secure ACS, Cisco IPS, Router, switch

Good knowledge of Linux OS, including: Firewalling, file system, useful tools and protocol.

basic Scripting skills is a plus. 

Very good knowledge on the TCP/IP stack (TCP port commonly used, ICMP options, sessions control and establishment, IPSEC, AH)

good understanding of LDAP protocol

Basic knowledge of Vmware and openstack is an advantage

Should you want more information, do not hesitate to apply with a word version of your CV & a member of the team will come back to you as soon as possible.

Capital International Staffing Ltd is acting as an Employment Business in relation to this vacancy.