Network Security Engineer (Palo Alto, Cloud)

Responsibilities

• Security Engineering & Operations: Design, implement, manage, and optimise key network security controls including next-generation firewalls (NGFW), web application firewalls (WAF), anti-DDoS, intrusion detection and prevention systems (IDPS), network detection and response (NDR), API protection, and network security policy orchestration platforms.

• Threat & Vulnerability Management: Proactively identify, assess, and track network security vulnerabilities and configuration weaknesses. Lead and verify mitigation efforts to closure.

• Security Architecture Review: Act as a subject-matter expert, reviewing and advising on the network security design for new IT projects and on-premises/cloud architectures to ensure alignment with the Corporation’s security policies/standards and industry best practices.

• Incident Response & Resilience: Participate in the security incident response process, including on-call support outside regular business hours. Coordinate and execute disaster recovery (DR) drills and security-focused non-functional testing.

• Process & Governance: Develop and maintain relevant security operational procedures, standards, and guidelines. Ensure security operations comply with internal policies and relevant business and legal/regulatory requirements.

• Stakeholder & Vendor Management: Collaborate effectively with internal IT teams, business units, and external vendors to resolve complex technical issues and manage change implementations.

Requirement

• Bachelor’s degree in Computer Science, Information Technology, or a related field.

• Minimum of 3 years of hands-on experience in network security engineering within a sizable organization.

• Proven technical expertise in NGFW (e.g., Palo Alto, Fortinet, Check Point, HillStone), WAF (e.g., Akamai, Alibaba Cloud Firewall), anti-DDoS, intrusion detection and prevention systems (IDPS), NDR (e.g., Vectra), API protection, and network security policy orchestration platforms (e.g., Tufin), network infrastructure, and related technologies and processes.

• Experience with firewall management and analysis tools.

• Professional certifications such as CISSP, CCNA Security, PCNSE, or NSE.

• Familiarity with ITIL frameworks.

• Experience with scripting (Python, PowerShell, Ansible) for automation of security tasks.

• Strong analytical and problem-solving skills, with the ability to work independently under pressure and tight deadlines.

• Excellent interpersonal and communication skills, with fluency in spoken and written English. Proficiency in Mandarin is desirable for liaising with regional teams and stakeholders.