{"id":1293050,"url":"https://alion.io/job/aviva-india-network-security-lead","title":"Network Security Lead","company":{"id":2790795,"name":"Aviva India","domain":"avivaindia.com","url":"https://alion.io/company/avivaindia","size_band":"1-10","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":55000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":9},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CyberArk","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"ISO 27001","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VMWare","optional":false},{"name":"Zero Trust","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-08-10T07:01:53Z","employer_posted_date":null,"last_verified_at":"2026-08-10T07:01:53Z","board_verified":false,"closed_at":null,"days_open":52,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":52},"description":"Role Summary :\n\nWe are seeking a highly experienced Network Security Lead to own and drive enterprise network and cyber security strategy, architecture, and operations. The role demands strong expertise in CyberArk PAM, Firewalls, SD-WAN, DLP, SIEM, SOAR, and enterprise monitoring solutions. The ideal candidate will combine deep technical skills with leadership capabilities to manage complex security environments and guide teams toward a mature security posture.\n\nKey Responsibilities :\n\n1. Network & Security Architecture :\n\n- Lead the design, implementation, and optimization of secure network architecture across on-prem, cloud, and hybrid environments.\n\n- Define and enforce network security standards, segmentation models, and zero-trust principles.\n\n- Ensure resilience, scalability, and availability of security infrastructure.\n\n2. Firewall & SD-WAN Management :\n\n- Own implementation and operations of Next-Generation Firewalls (NGFW) such as Palo Alto, Fortinet, Cisco, Check Point, etc.\n\n- Design and manage firewall rulesets, NAT, IPS/IDS, VPNs (site-to-site and remote access).\n\n- Lead deployment, migration, and optimization of SD-WAN solutions (Cisco, Fortinet, VMware, Silver Peak, etc.).\n\n- Integrate SD-WAN with security controls including firewalls, cloud security, and monitoring platforms.\n\n- Ensure secure connectivity between data centers, branches, and cloud environments.\n\n3. Privileged Access Management (CyberArk) :\n\n- Own and manage CyberArk PAM solutions including PVWA, CPM, PSM, and EPM.\n\n- Implement privileged access lifecycle management, password vaulting, session monitoring, and compliance reporting.\n\n- Lead CyberArk onboarding, integrations, upgrades, and operational governance.\n\n4. SIEM & SOAR :\n\n- Lead SIEM platform operations (ArcSight, Sentinel, etc.) including onboarding of firewall, SD-WAN, and security device logs.\n\n- Define and optimize correlation rules, dashboards, alerts, and compliance reporting.\n\n- Drive SOAR automation for incident response, threat containment, and remediation workflows.\n\n5. Data Loss Prevention (DLP) :\n\n- Design and manage DLP controls for data at rest, in use, and in transit.\n\n- Partner with legal, compliance, and business teams to balance security and usability.\n\n6. Threat Detection & Incident Response :\n\n- Lead network and security incident response including firewall breaches, lateral movement, and data exfiltration attempts.\n\n- Perform threat hunting, root cause analysis, and post-incident improvements.\n\n- Coordinate with SOC teams, vendors, and senior leadership during critical events.\n\n7. Monitoring, Governance & Compliance :\n\n- Oversee enterprise security monitoring and alerting for network and security platforms.\n\n- Ensure adherence to ISO 27001, NIST, PCI-DSS, SOX, GDPR, and regulatory requirements.\n\n- Support audits, vulnerability assessments, penetration tests, and risk assessments.\n\n8. Leadership & Stakeholder Engagement :\n\n- Lead, mentor, and grow a team of network and security engineers.\n\n- Act as a trusted advisor to IT and business leadership on network security risks and roadmap.\n\n- Manage security vendors, service providers, and technology partners.\n\nRequired Skills & Qualifications :\n\n1. Technical Skills :\n\n- 8-10 years of experience in Network & Cyber Security.\n\n- Strong hands-on experience with Next-Generation Firewalls (NGFW).\n\n- Proven experience in SD-WAN design, deployment, and operations.\n\n- Expert knowledge of CyberArk PAM solutions.\n\n- Strong SIEM experience with log ingestion from network, firewall, and SD-WAN platforms.\n\n- Experience with SOAR, security automation, and orchestration.\n\n- Deep understanding of DLP technologies.\n\n- Strong networking fundamentals (TCP/IP, routing, switching, DHCP, DNS).\n\n- Cloud and cloud-network security experience (AWS/Azure/GCP) is a plus.\n\n2. Soft Skills :\n\n- Strong leadership, mentoring, and team-building skills.\n\n- Excellent communication and stakeholder management.\n\n- Analytical mindset with strong problem-solving abilities.\n\n- Ability to lead under pressure during security incidents.\n\n3. Certifications (Preferred) :\n\n- CISSP, CISM, CCSP.\n\n- CyberArk PAM Certifications.\n\n- Firewall/Network Certifications (PCNSE, NSE, CCNP Security, etc.).\n\n- Cloud Security Certifications (Azure/AWS).\n\n4. Nice to Have :\n\n- SOC transformation or large-scale security modernization experience.\n\n- Zero Trust and Secure Access Service Edge (SASE) exposure.\n\n- Experience with UEBA, CASB, EDR/XDR.\n\n- Automation and scripting (Python, PowerShell).\nSkills\nCyber Security, Network Security, CyberArk PAM, Firewall, SIEM, IT Security Strategy, DLP, SDWAN, CISSP, CCNP","description_format":"text","description_chars":4633,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Financial Services","Property & Casualty Insurance","Life Insurance & Annuities"],"lifecycle":[{"event":"open","at":"2026-09-26T08:01:01Z"}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.527,"p_room":0.35,"age_days":51,"expected_fill_days":24,"reasons":["seen:51","win:tail"],"computed_at":"2026-10-01T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/aviva-india-network-security-lead","json_url":"https://alion.io/job/aviva-india-network-security-lead.json","meta":{"generated_at":"2026-10-01T11:06:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":2508,"day_limit":5000,"remaining_today":2492,"minute_limit":60,"resets_at":"2026-10-02T00:00:00Z"}}}