Cyber security Operations Specialist (1429)

About the company

Role overview

Email security and mail gateway

• Monitor service health, mail flow, system performance, and availability.
• Configure anti-spam, anti-malware, and phishing protection policies.
• Resolve delivery issues, false positives and negatives, mail queue problems, and connectivity challenges.
• Plan and execute software upgrades, firmware updates, and hotfixes; ensure compliance with security frameworks and mandates.

WAF administration

• Configure and maintain Fortinet WAF policies, virtual servers, protected applications, and security profiles.
• Configure SSL/TLS inspection and manage digital certificates; onboard web applications and APIs.
• Validate application functionality after WAF policy implementation and monitor logs, alerts, and events for attacks.

Threat analysis and sandboxing

• Maintain Forti Sandbox policies, malware analysis profiles, IOC generation, quarantine actions, notifications, and supported file submission settings.
• Integrate Forti Sandbox with the Mail Gateway and execute firmware upgrades, hotfixes, and signature updates.
• Ensure sandbox security configurations meet organizational policies and regulatory requirements.

Firewall policy review and compliance

• Review multi-vendor firewall policies using FireMon and assess overly permissive, Any-to-Any, shadowed, duplicate, redundant, and unused rules.
• Configure policy analysis, compliance frameworks, risk scoring, recertification, and reporting modules; maintain vendor integrations.
• Generate operational, compliance, and executive reports on policy posture, violations, optimization, and risk exposure.

Qualifications and requirements

• Proven hands-on experience administering Fortinet Mail Gateway, Sandbox, and WAF solutions, and firewall policy management tools such as FireMon.
• Deep understanding of email security protocols, WAF configurations, SSL/TLS inspection, malware analysis, and firewall rule optimization.
• Ability to turn regulatory standards and organizational security policies into technical configurations and controls.
• Strong troubleshooting capability for mail flow, application connectivity, and policy-related vulnerabilities.