Job Description

Role Summary

Seeking an experienced Cyber Security Lead Consultant to provide L3/L4 support for network security operations, intrusion detection/prevention, firewall management, threat monitoring, incident response, and detection engineering. The role will partner with SOC, infrastructure, network, cloud, and application security teams to strengthen enterprise security posture and ensure effective threat detection and response.

Key Responsibilities
Manage and optimize IDS/IPS platforms and network security controls.
Investigate intrusion alerts, anomalous traffic, suspicious activity, and indicators of compromise (IOCs).
Tune IDS/IPS signatures, policies, thresholds, and detection rules.
Analyze packet captures, network traffic, firewall logs, and security events.
Administer and troubleshoot Palo Alto, Check Point, Cisco FirePOWER firewalls, VPNs, and threat prevention technologies.
Review firewall policies, access controls, VPN configurations, and security rules.
Perform threat hunting and advanced security monitoring across firewall, IDS/IPS, VPN, endpoint, cloud, and SIEM platforms.
Correlate security events to determine scope, impact, and root cause.
Act as L3/L4 escalation point for critical security incidents.
Lead investigation, containment, remediation, and root cause analysis activities.
Develop and enhance SIEM correlation rules and IDS/IPS detection use cases.
Identify monitoring gaps and recommend security improvements.
Prepare incident reports, executive summaries, and corrective action recommendations.
Mentor L1/L2 analysts and contribute to SOPs, runbooks, and operational documentation.
Support governance reviews, audits, reporting, and continuous service improvement initiatives.
Required Skills

Network Security

IDS/IPS administration and monitoring
Enterprise firewall management
Firewall policy and rule-base administration
VPN, network segmentation, and secure remote access
Packet analysis and network traffic investigation
TCP/IP, DNS, HTTP/HTTPS, SSL/TLS

Security Platforms

Palo Alto Networks
Check Point Firewall & VPN
Cisco FirePOWER
Microsoft Sentinel, Splunk, QRadar, or ArcSight

Security Operations

Security event analysis and incident response
Threat hunting and IOC analysis
Root cause investigation
Detection engineering fundamentals
Security documentation and escalation management

Technical Skills

Wireshark, tcpdump, or similar tools
KQL, SPL, or equivalent query languages
Security logging and monitoring architecture
PowerShell or Python (preferred)
Preferred Knowledge
MITRE ATT&CK Framework
Cyber Kill Chain
NIST Incident Response
ISO 27001
Cloud Security Monitoring
Threat Intelligence & SOAR
Vulnerability Management
ITIL Incident, Problem & Change Management

Experience & Qualifications
8-12 years of cybersecurity experience.
Strong hands-on experience in firewall security, IDS/IPS, SOC, and network security monitoring.
Experience handling L3/L4 escalations and high-severity incidents.
Experience with enterprise firewall, IDS/IPS, and SIEM technologies.
Experience working with cross-functional teams and mentoring junior analysts.
Bachelor's degree in Computer Science, Cybersecurity, Information Security, Engineering, or related field.

Preferred Certifications

PCNSE, CCSE, Cisco Security/FirePOWER, Microsoft SC-200, Splunk Enterprise Security, GCIA, GCIH, CISSP, CompTIA CySA+ or Security+.

͏

Areas of Responsibility

Requirement Gathering-"Define requirement specifications basis workshops and discussions with senior client stakeholders and identify optimisation opportunities to be considered as part of design process."

Feasibility Analysis-Undertake feasibility analysis to identify potential constraints and change requirements by engaging with client business stakeholders and cross-functional teams.

Solution Design-Develop solution design across modules and systems, ensuring scalability, feasibility and alignment with existing enterprise architecture.

Configuration and Customisation-Conduct design reviews to ensure configurations align with defined development frameworks. Recommend best practices and implement solutions to enhance business process's quality.

Technology Harmonisation-Review the integration architecture across systems, ensuring its alignment with the defined integration framework. Implement the data migration strategy to ensure accurate flow of data across multiple applications.

Troubleshooting and optimisation-Optimize solution performance by ensuring alignment with established cost, scalability, and efficiency targets.

Documentation-Oversee creation and review of functional and technical documentation, ensuring alignment with architectural standards across modules and project teams.