As a Security Engineer, you will help protect the security, resilience and performance of our global infrastructure. You will take ownership of our security posture, with a strong focus on firewall systems, security controls, monitoring and continuous improvement. You will work alongside experienced network, systems and security colleagues to strengthen our security measures, optimise firewall policies and contribute to the architecture and future evolution of our security infrastructure.

Your responsibilities

Security Infrastructure Management & Optimization

• Proactively monitor and review security-related logs across AMS-IX’s global infrastructure, identifying any suspicious activity or threats.
• Optimize existing firewall rules and configurations to enhance performance and security.
• Enforce security policies and procedures.

Architecture & Design

• Collaborate with the team to design, implement, and improve firewall architecture for different regions, ensuring scalability, security, and performance.

Migrations & Upgrades

• Participate in the planning and execution of firewall migrations, updates, and technology upgrades to maintain a future-proof and secure environment.

Documentation & Reporting

• Maintain accurate documentation for firewall policies, configurations, and security measures.
• Regularly provide reports on security status, risks, and areas for improvement.
  Asset Security
• Identify and classify assets, determine required security controls, and ensure appropriate asset decommissioning.

Security Assessment and Testing

• Design test and audit methodology.
• Perform security control testing and internal audits of deployed firewalls, systems, and services.
• Analyse test results and cooperate with asset owners on remediating risks and vulnerabilities.

ISMS Activities Support

• Follow up on Information Security Activities supporting the ISMS and convert the different findings into actionable items.

Your profile

• At least 3–5 years of experience managing and optimising firewall infrastructure in a large-scale, global network environment.A Bachelor’s or Master’s degree, or equivalent professional experience.Relevant security certifications, such as CISSP, CCSP or Palo Alto Networks PCNSE, are highly desirable.

Technical skills you bring

• Proficient in firewall technologies and platforms such as Juniper and Palo Alto.
• Deep understanding of networking and security protocols, firewall rule configuration, VPNs, IDS/IPS, and threat mitigation strategies.
• Strong analytical and problem-solving abilities, with the capacity to work with large data sets (firewall logs, alerts, etc.).
• Familiarity with SIEM systems (e.g., Splunk, Sentinel), vulnerability scanning tools, and incident response tools.
• Experience with cloud security and cloud-based firewall services (e.g., AWS, Azure) is a plus.
• Knowledge of advanced threat detection and response techniques (e.g., anomaly detection, traffic analysis) is a plus.
• Understanding of compliance standards and regulations (e.g., GDPR, ISO/IEC 27001) is a plus.
• Experience in network design and architecture, especially in global distributed systems is a plus.
• Knowledge of additional security tools such as DDoS mitigation, web application firewalls, etc. is a plus.
• Experience in handling system engineering tasks such as configuring and maintaining operating systems, servers, and hardware related to firewall infrastructure is a plus.
• Knowledge in systems administration, specifically Linux/Unix-based/Windows systems and experience with system monitoring tools is a plus.
• Experience with automation of system-level tasks using scripting languages (e.g., Bash, Python) for system maintenance is a plus.
• Familiarity with automation tools (e.g., Ansible, puppet) is a plus.
• Experience with AAA technologies (Radius, Kerberos. SSO, Hardware Tokens e.g. Yubikeys) is a plus.
• Experience with E-mail and DNS Security is a plus.
• Experience with Anti-Malware Technologies is a plus.
• Experience with Backup Technologies and Concepts is a plus.

Soft skills we value

• Proactive & Independent: Able to work autonomously and take ownership of tasks, driving initiatives forward with minimal supervision.
• Detail-Oriented: Focused on the accuracy and quality of work, especially when handling configurations and rule sets.
• Collaborative: Strong communication skills and a team-oriented mindset, with the ability to collaborate effectively with various stakeholders.
• Curiosity & Growth-Oriented: A keen interest in staying updated on the latest security trends and technologies.