Security Engineer (L2) – Cisco Switching & Firewall

About the role

The Security Engineer (L2) will design, assess, configure and support Cisco Layer‑2 switching and Cisco Firepower Next‑Generation Firewall environments. The role focuses on implementing security controls, optimizing network and firewall architectures, and integrating logs with SIEM platforms to protect client infrastructures.

Key responsibilities

• Assess Cisco Layer‑2 switching environments and recommend security improvements.
• Review and harden VLAN architecture, switch management planes and implement NAC controls.
• Integrate switch logs with SIEM solutions and troubleshoot switching issues.
• Evaluate existing Cisco Firepower deployments, optimize firewall rule bases and security policies.
• Configure and maintain IDS/IPS, URL filtering, application control, malware protection and VPN profiles.
• Perform firewall health checks, performance tuning and incident troubleshooting.
• Document configurations, procedures and operational guidelines.

Required profile

• Strong foundation in cybersecurity and information security with experience designing and improving security controls.
• Hands‑on network security experience, including secure architecture, firewall configuration and IDS/IPS monitoring.
• Practical knowledge of application security, secure SDLC practices and vulnerability remediation.
• Proficiency in vulnerability assessment, tool usage, result interpretation and risk prioritisation.

Required skills

• Cisco Layer‑2 Switching
• Cisco Firepower NGFW
• VLAN design and segmentation
• Network Access Control (NAC)
• SIEM integration
• IDS/IPS configuration
• Firewall rule‑base optimisation
• URL filtering and application control
• Malware protection integration
• VPN configuration and management
• Network and application security
• Vulnerability assessment