punch cyber analytics groupReston, VA
Cyber Security Engineer - Firewall
Cyber Security Engineer - Firewall
Cyber Security Engineer - Firewall
punch cyber analytics groupReston, VA
yesterday
Information Security AnalystsInformation Security EngineersNetwork and Computer Systems Administrators
Apply for this role (opens in a new tab)Cyber Security AnalystPUNCH Cyber Analytics Group (PUNCH) is a Virginia-based, small business founded in 2012 operating as a cohesive team that incorporates the sum of our group's diverse skills, talents, and resources toward our collective passion: advancing data analytics to impact cyber operations. PUNCH is a two-time Inc. Magazine 'Best Workplaces' awardee offering unique benefits and personal touches to provide a positive work-life experience for our team. PUNCH brings unique qualifications, resources, and past-performance that make us suitable to address the goals of our diverse customer-base. Further, we have past and current experience supporting cyber operations and cyber ML-based research, with well over 100 years of collective experience from our collaborative, multi-disciplinary team.
Responsibilities:
- Apply configurations on perimeter routers, firewalls, and security controls IAW NIST 800-53 Provide recommendations regarding DOIs perimeter UTM devices IAW NIST 800-53 and industry best practices for Fortigate products
- Configure, deploy, and maintain FortiGate firewalls.
- Create and manage firewall policies, NAT, VIPs, and security rules.
- Configure IPsec and SSL VPNs for remote and site-to-site connectivity.
- Manage FortiManager for centralized firewall administration.
- Monitor security events and logs using Forti
Analyzer.
Implement network segmentation using VLANs and security zones.
Troubleshoot firewall, routing, VPN, and connectivity issues.
Perform firewall rule reviews and remove obsolete or overly permissive rules.
Develop and maintain firewall/network security documentation.
Create security reports and dashboards for management or compliance requirements.
Configure authentication integrations such as RADIUS, LDAP, Active Directory, and MFA.Perform network troubleshooting using packet captures, routing tables, logs, and FortiGate diagnostic commands.
Participate in security architecture and network design projects.
Test firewall policies and security controls after configuration changes.
Automate repetitive security/network tasks using Python, APIs, or FortiManager automation.
Minimum Qualifications:
- 7 years of experience with a bachelor's degree or 9 years of total experience
- Proficient in network, routing, and switching.
- Proficient in network scripting
- Proficient with OSI Models Layers 1-7 and network troubleshooting.
- Ability to work in both an individual and team environment
- Flexibility to support after hours maintenance activities
- Must be able to obtain a Position of Public Trust from Dept. of Interior
Preferred Qualifications:
- Fortinet NSE 4 Certified and/or Fortinet Certified Professional (FCP)
- Next Generation Firewall Experience, preferably Fortinet.
- Experience support Incident Response (IR) Teams
Also on the board Same function, level within a rung
Level
Senior
Location
Reston, VA
Occupation
Information Security Analysts
Industry
Computer Systems Design Services
Posted
yesterday