Security Engineer | Network

Expleo is a trusted partner for end-to-end, integrated engineering, quality services, and management consulting for digital transformation. We help businesses harness technological change to deliver innovation, improve resilience, and support the secure delivery of complex products, platforms, and systems.

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UK's Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the client's security tooling estate.

As a Security Engineer | Network, you will provide design, review, and analysis expertise across the client's firewalls, intrusion prevention, secure web gateway, and remote access controls.

• →Assess firewall, intrusion prevention and gateway change requests for security risk and design quality and prepare change designs for implementation by UK-based personnel.
• →Carry out quarterly firewall rule-base reviews (and after significant change) using configuration exports, and report findings and recommendations.
• →Analyse network security log and alert reporting monthly, and on request during incidents, and provide recommendations.
• →Track intrusion prevention signature (digital vaccine) releases against the 48-hour application target and advise on critical updates, working with the Vulnerability and Patch Manager.
• →Contribute to secure web gateway, remote access and CASB policy design and review.
• →Review network segmentation and IT/OT boundary controls and recommend improvements.
• →Define audit logging requirements for network security devices, in line with the logging design.
• →Produce internet access usage and network security reports in the agreed format and to the agreed schedule.
• →Maintain network security infrastructure diagrams and configuration documentation.
• →Support the growth of Expleo's Cybersecurity Practice through knowledge sharing and technical contribution.

• Degree in computer science, networking, cybersecurity or a related discipline, or equivalent professional experience.
• Vendor firewall certification, e.g. PCNSE or Fortinet NSE 4 or above (at least one required).

CompTIA Security+, CySA+, CCNP Security, or an SSE/SASE vendor certification would be advantageous

• Rule-base analysis tools (e.g. AlgoSec, Tufin, FireMon).
• Web application firewall and load balancer experience (e.g. F5 BIG-IP).
• OT network security experience (e.g. Nozomi, Claroty) and energy or CNI sector exposure.

• Next-generation firewall design and rule-base review (e.g. Palo Alto, Fortinet, Check Point).
• Intrusion prevention and network detection technologies (e.g. Trend Micro TippingPoint, Cisco Firepower, Darktrace).
• Secure web gateway, SSE/SASE and remote access (e.g. Prisma Access, Zscaler, Netskope).
• TCP/IP, routing, VPN, network segmentation and IT/OT boundary concepts.
• Security log analysis and ITIL change and incident processes.
• Clear written reporting and documentation.

• 4-7 years in network security engineering or operations.
• Experience of firewall rule-base review and change risk assessment in enterprise environments.

• Have the right to work in India.
• Be based in, or willing to relocate to, Chennai.
• Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
• Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
• Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
• Be comfortable working within a strict security boundary, with no access to the client's operational systems or data.