{"id":2508958,"url":"https://alion.io/job/nasu-group-senior-aws-network-security-engineer","title":"Senior AWS Network Security Engineer","company":{"id":3800363,"name":"Nasu Group","domain":"nasugroup.com","url":"https://alion.io/company/nasugroup","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":38000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"FortiGate","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-14T05:19:30Z","employer_posted_date":null,"last_verified_at":"2026-10-14T05:19:30Z","board_verified":false,"closed_at":null,"days_open":3,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":3},"description":"Job Summary : \n\nWe are looking for an experienced AWS Senior Network Security Engineer to design, implement, and secure an isolated recovery environment (IRE).\n\nThe role involves establishing network segmentation, configuring AWS networking components and FortiGate firewalls, implementing cloud security controls, and ensuring complete isolation of recovery traffic from production and enterprise services.\n\nThe engineer will also be responsible for integrating security telemetry with the SIEM platform and validating endpoint protection and cloud security posture across recovered workloads.\n\nKey Responsibilities : \n\n- Design and implement network isolation to ensure recovery traffic remains fully segregated from production and enterprise services.\n\n- Configure AWS Transit Gateway (TGW) attachments, route table associations, VPC routing, and Route 53 public and private hosted zones.\n\n- Configure and manage FortiGate firewalls, perimeter ACLs, and remote-access solutions, including break-glass access paths.\n\n- Implement and validate security groups, Network ACLs (NACLs), egress restrictions, and network segmentation controls to maintain the air-gap security posture.\n\n- Integrate security logs and telemetry from infrastructure, platform, and application sources with the SIEM platform.\n\n- Validate deployment and active operation of endpoint and workload protection across recovered servers, containers, and cloud workloads.\n\n- Ensure vulnerability management and Cloud Security Posture Management (CSPM) tools have visibility into the isolated recovery environment.\n\n- Collaborate with security stakeholders on policy definition, security controls reviews, and compliance requirements for regulated workloads.\n\nMandatory Skills : \n\n- 8+ years of experience in AWS networking and cloud security engineering.\n\n- Strong hands-on expertise in AWS Transit Gateway, VPC routing, and Route 53 public/private hosted zones.\n\n- Experience configuring and managing FortiGate firewalls and perimeter access controls.\n\n- Strong understanding of network isolation, segmentation, and secure network architecture for regulated environments.\n\n- Hands-on experience implementing security groups, NACLs, egress restrictions, and cloud security guardrails.\n\n- Experience integrating cloud infrastructure and application logs with SIEM platforms.\n\n- Knowledge of EDR, CSPM, vulnerability management, and workload protection solutions.\n\n- Experience designing and validating secure remote-access mechanisms and emergency access procedures.\n\nPreferred Experience : \n\n- Experience designing isolated recovery environments or disaster recovery network architectures.\n\n- Familiarity with maintaining air-gap security controls during and after recovery operations.\n\n- Experience working in regulated enterprise environments with stringent security and compliance requirements.\n\n- Ability to collaborate with security teams on policy definition and security control reviews.\n\nKey Deliverables : \n\n- Secure network isolation setup for the isolated recovery environment.\n\n- Configured and validated AWS networking, routing, firewall, and perimeter controls.\n\n- Implemented security guardrails and controlled remote-access mechanisms.\n\n- Verified SIEM integration, endpoint protection, vulnerability management, and CSPM visibility across recovered workloads.\n\nSkills\nCloud Security, AWS, Security Architect, Network Security, SIEM, CSPM, Vulnerability Management, Fortigate Firewall, Firewall","description_format":"text","description_chars":3477,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","AI Agents","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-14T08:29:45Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":3,"expected_fill_days":26,"reasons":["seen:3","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nasu-group-senior-aws-network-security-engineer","json_url":"https://alion.io/job/nasu-group-senior-aws-network-security-engineer.json","meta":{"generated_at":"2026-10-17T21:50:25Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6645,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3800363},"rest":"https://alion.io/mcp/rest/get_company?id=3800363"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnasu-group-senior-aws-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnasu-group-senior-aws-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnasu-group-senior-aws-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nasu-group-senior-aws-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnasu-group-senior-aws-network-security-engineer"}]}