About this role
Role purpose
Carry out technical security work assigned by the division
lead across Giga's networks, platforms and applications. Work alongside the
lead on operations and projects, coordinating with NOC, IT Systems and
development to protect critical services.
Assigned responsibilities
• Configure and maintain security controls assigned for a
task, such as firewalls, WAF, VPN, MFA, identity and segmentation.
• Perform assigned network, infrastructure, application and
API security reviews; document findings and proposed controls for the division
lead.
• Apply and check approved security baselines on specified
devices, servers, management paths and virtual infrastructure with the owning
teams.
• Connect specified devices and services to logging and
monitoring platforms; validate the quality and coverage of their telemetry.
• Investigate assigned vulnerabilities and
misconfigurations, support remediation with owners and verify fixes within an
approved scope.
• Support incident investigations and perform predefined
containment only when authorized, coordinating with NOC, IT and service owners.
• Support assigned ISP and customer-facing work, including
DDoS, abuse, reseller access, edge exposure and routing security.
• Complete delegated project tasks and document changes,
tests, rollback steps and handovers for the division lead's review.
Authority and access
Each assignment identifies the systems, permitted actions
and expected deliverables. Administrative access is granted only where needed
for the approved task; read access applies elsewhere by default. Containment
follows the incident plan and emergency escalation path. The division lead
reviews work; business risk acceptance and materially disruptive changes follow
the authorized approval path.
Required profile
• Practical experience with network security, firewalls,
VPNs, web or API protection, TCP/IP, DNS and secure remote access.
• Ability to troubleshoot from configurations, logs and
packet captures and to work with Windows, Linux and virtualized systems.
• Sound change discipline, clear technical documentation
and the ability to coordinate remediation across teams.
Useful experience: ISP or telecom networks, Fortinet
technologies, identity and MFA, SIEM integration, scripting, and application
security. Relevant education, training or equivalent hands-on experience is
accepted.