{"id":2850222,"url":"https://alion.io/job/still-junior-network-security-engineer","title":"Junior Network Security Engineer","company":{"id":4376379,"name":"STILL","domain":"still.at","url":"https://alion.io/company/still-gesellschaft-m-b-h","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":209,"ghost_share":0.029,"stale_share":0,"repost_share":0.124,"time_to_fill_p50_days":67,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":9500,"max_usd":26000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":575},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"ITIL","optional":false},{"name":"PKI","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-10-19T12:57:54Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-21T23:54:00Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"A key objective of the position is to support the team in reducing the operational ticket backlog while maintaining service quality, security, and accurate documentation. The role performs initial analysis and troubleshooting, resolves standard and recurring requests based on documented procedures, and escalates complex issues to experienced engineers, the Network Security Architect, vendors, or service providers when required.The position also supports platform monitoring, maintenance, lifecycle activities, audits, control reviews, documentation, and continuous service improvement. The Junior Network Security Engineer works under the guidance of experienced team members and gradually develops broader technical knowledge and operational responsibility across the Network Security & Trust service portfolio.\nWe offer:\n1. Incident, Service Request and Change Processing - 35%\nProcess Network Security & Trust incidents, service requests, tasks, and standard changes using the designated IT service-management tool. \nPerform initial analysis, troubleshooting, classification, prioritization, and documentation of incoming tickets. \nResolve standard and recurring issues by following approved procedures, knowledge articles, technical standards, and operational runbooks. \nSupport the team in reducing the ticket backlog through structured processing, regular follow-up, and accurate status updates. \nMonitor assigned tickets and ensure timely processing in line with agreed priorities and service levels. \nCollect relevant technical information, logs, configurations, and error details before escalating complex cases. \nEscalate security-critical, high-impact, or technically complex issues to senior engineers, architects, vendors, or service providers. \nSupport the planning, testing, documentation, and implementation of standard and low-risk changes. \nParticipate in incident reviews, problem investigations, and root cause analysis under the guidance of experienced team members. \nCreate and maintain knowledge articles, troubleshooting instructions, and operational runbooks for recurring issues. \n2. Firewall Operations and Security Policy Support - 25%\nSupport the daily operation, monitoring, maintenance, and health checking of enterprise firewall services across on-premises, cloud, edge, and industrial environments. \nImplement approved firewall-rule, object, NAT, and security-policy changes by following established procedures and technical standards. \nValidate requests for completeness, approvals, ownership, source and destination information, ports, protocols, and business justification. \nSupport the review, modification, deactivation, and removal of firewall rules and objects. \nAssist with firewall rule reviews, recertification, cleanup, and policy-optimization activities. \nPerform initial troubleshooting of firewall, NAT, security-policy, and communication-flow issues. \nMonitor firewall availability, capacity, performance, and operational alerts and escalate deviations where required. \nSupport firewall platform maintenance, upgrades, backup and restore activities, and operational readiness checks. \nMaintain accurate firewall configuration records, operating procedures, diagrams, and technical documentation. \n3. VPN, Partner Connectivity and Segmentation Operations - 15%\nSupport the implementation, maintenance, monitoring, and troubleshooting of site-to-site IPsec VPN connections. \nProcess standard requests related to business partner, service provider, cloud, and third-party connectivity. \nAssist with the implementation and maintenance of approved network-segmentation controls, security zones, and controlled communication paths. \nSupport NAC and microsegmentation activities from a network-security and policy-enforcement perspective. \nPerform initial troubleshooting of VPN availability, tunnel status, encryption parameters, network-security policies, and connectivity dependencies. \nMaintain accurate configuration, ownership, approval, and lifecycle information for VPN and partner-connectivity services. \nSupport periodic reviews, recertification, deactivation, and removal of obsolete VPN connections and communication paths. \nCoordinate operational tasks with internal infrastructure teams, external partners, vendors, and managed service providers. \n4. PKI and Certificate Operations - 10%\nProcess standard certificate requests and support the issuance, deployment, renewal, replacement, revocation, and retirement of digital certificates. \nSupport operational activities related to Public Key Infrastructure and Certificate Lifecycle Management. \nMonitor certificate validity, upcoming expirations, service alerts, and certificate-related operational events. \nAssist application owners, infrastructure teams, network teams, and service providers with standard certificate requests and lifecycle activities. \nPerform initial troubleshooting of certificate enrollment, expiration, trust-chain, revocation, validation, and TLS-related issues. \nMaintain accurate certificate inventory, ownership, lifecycle, configuration, and operational information in the designated systems of record. \nSupport the onboarding of applications, infrastructure platforms, network devices, users, and machine identities to approved certificate services. \nSupport PKI and CLM platform maintenance, control reviews, audits, backup and restore activities, and operational documentation. \nEscalate complex issues related to PKI, Certificate Authorities, cryptography, trust models, or certificate integration to the responsible specialists. \n5. Service Reliability, Lifecycle and Compliance Support - 10%\nPerform recurring operational checks and maintenance activities for Network Security & Trust services. \nSupport platform lifecycle activities, including software updates, upgrades, configuration reviews, backup verification, and operational readiness checks. \nAssist with monitoring service health, availability, capacity, certificate expiration, policy compliance, and operational risks. \nSupport technical audits, control assessments, evidence preparation, recertification activities, and remediation of operational findings. \nMaintain the operational and technical documentation required for the assigned services and activities. \nPerform assigned activities in accordance with approved security standards, change procedures, separation-of-duties requirements, and operational controls. \nContribute to service reporting by providing accurate ticket, incident, change, lifecycle, and operational information. \nIdentify recurring issues, missing documentation, and operational risks and communicate them to the responsible senior team members. \n6. Continuous Improvement and Automation Support - 5%\nContribute to the standardization and simplification of recurring operational activities. \nIdentify repetitive tasks that may be suitable for templates, scripts, workflows, APIs, or other forms of automation. \nSupport the testing and use of approved automation for configuration validation, reporting, certificate lifecycle processing, and operational checks. \nAssist senior engineers and architects with technical testing, implementation activities, and operational handover. \nContribute to the improvement of knowledge articles, troubleshooting procedures, request forms, and operational runbooks. \nParticipate in team knowledge-sharing, technical training, service reviews, and continuous-improvement activities.\nInterfaces:\nInternal:\nNetwork Security & Trust team and Network Security Architect \nRelated infrastructure, network, cloud, workplace, application, and Cyber Security teams \nIT service-management and support functions \nRegional IT teams, system and application owners, and project teams \nArchitecture, risk, compliance, and audit functions \nExternal:\nManaged Network Security & Trust service providers \nFirewall, VPN, NAC, PKI, CLM, and security-technology vendors \nCertificate service providers and external trust-service partners \nSecurity integrators and implementation partners \nCloud service providers and external business partners \nExternal consultants and auditors where required \nTasks and Qualifications:\nExperience:\nInitial professional experience, internship experience, working-student experience, or practical training in IT infrastructure, network operations, network security, cyber security, PKI, certificate management, or a comparable technical environment \nBasic practical experience with firewalls, VPNs, network-security controls, certificates, or IT operations is an advantage \nExperience processing technical tickets or working with an IT service-management tool is an advantage \nInitial experience with incident handling, technical troubleshooting, documentation, or standard changes is an advantage \nExposure to enterprise firewall, VPN, PKI, certificate management, CLM, or comparable infrastructure-security technologies is an advantage\nExperience in an international or distributed IT environment is an advantage but not mandatory \nStrong willingness to learn Network Security & Trust technologies and gradually assume broader operational responsibility\nQualifications/Specialization:\nBachelor’s degree or diploma in Computer Science, Information Technology, Cyber Security, Telecommunications, Electronics, or a comparable technical discipline \nA comparable technical vocational qualification combined with relevant practical experience may also be considered \nEntry-level certifications or training such as Fortinet Certified Fundamentals, Fortinet Certified Associate, Cisco CCNA, CompTIA Network+, CompTIA Security+, Microsoft security fundamentals, ITIL Foundation, or comparable qualifications are an advantage \nInitial PKI, certificate-management, cryptography, or CLM product training is an advantage but not mandatory\n Soft Skills:\nStrong service orientation and willingness to support the team in reducing the operational ticket backlog \nReliable, structured, and accurate working style \nStrong willingness to learn and develop technical knowledge \nOwnership of assigned tickets and operational tasks \nAbility to follow procedures while identifying unclear or missing information \nGood analytical thinking and basic troubleshooting skills \nAbility to recognize when escalation or additional support is required \nGood collaboration skills and willingness to work with global teams and external providers \nClear and professional written and verbal communication \nStrong documentation and knowledge-sharing mindset \nGood written and spoken English","description_format":"text","description_chars":10536,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Warehousing","Industrial Machinery"],"lifecycle":[{"event":"open","at":"2026-10-19T12:57:54Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":67,"reasons":["conf:6","velocity","win:early","comp:junior,brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/still-junior-network-security-engineer","json_url":"https://alion.io/job/still-junior-network-security-engineer.json","meta":{"generated_at":"2026-10-22T22:44:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8089,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4376379},"rest":"https://alion.io/mcp/rest/get_company?id=4376379"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstill-junior-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstill-junior-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstill-junior-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/still-junior-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstill-junior-network-security-engineer"}]}