Cyber Engineering- Network& Endpoint Engineer- Hyderabad

The Cyber security team is a team within Information Technology Services servicing both internal and external facing business units for Deloitte USI.

Work you'll do

As a Network& Endpoint Engineer on the ITS Cybersecurity team, you will be responsible for:

• Work as a Network and Endpoint Engineer in the ITS Cybersecurity Team supporting Deloitte USI.
• Engineer and optimize Zscaler proxy and security controls, with a strong focus on secure web gateway policy, CASB, URL filtering, SSL/TLS inspection and inline DLP.
• Develop and maintain forward-proxy and web security policies, including URL categorization, PAC and proxy behavior, authentication flows, SSL/TLS inspection, bypasses, policy tuning, exception handling and troubleshooting.
• Troubleshoot end-to-end traffic flows across endpoints, proxies, DNS, firewalls, NAT, routing, VPN and Internet egress, using logs and packet-level evidence to isolate connectivity and security-policy issues. Support network security engineering using Palo Alto Networks technologies, including firewall policy, segmentation, routing, NAT, VPN, and secure connectivity.
• Investigate security events by correlating activity across proxy, firewall, DNS, network and endpoint telemetry, and support containment and remediation. Improve monitoring and detection coverage through log analysis, dashboards and alert tuning, with visibility across proxy, firewall, DNS, and network data sources.
• Partner with network, infrastructure, cloud, identity and application teams to assess technical risk and implement secure connectivity and security improvements. Automate repetitive Cyber Operations activities using scripting, APIs and orchestration, and maintain clear technical documentation, standards and runbooks. Coach and mentor junior team members to enhance their knowledge and skills. Stay up to date with the latest security technologies and trends. Build rapport with senior stakeholders to continually broaden and strengthen relationships. Present with presence and confidence to leadership and senior stakeholders. Drive and contribute to a positive and constructive culture. Share knowledge and implement opportunities for improvement from lessons learned activities.

The team

The Cybersecurity team at Deloitte USI, part of ITS group, is dedicated to protecting the company's digital assets and infrastructure. With a focus on maintaining a secure and resilient security posture, the team uses industry-standard security practices and tools to manage risks and respond to security incidents. Their goal is to ensure the confidentiality, integrity, and availability of Deloitte Australia's data, systems, and applications.

Location: Hyderabad

Shift Timings: 06:30 AM to 03:30 PM

Qualifications

Required:

• Minimum of 3 years of experience in Cloud Security & AI Security.
• Strong hands-on knowledge of Zscaler services and policy administration, particularly secure web gateway, CASB, URL filtering, SSL/TLS inspection and inline DLP - Must
• Experience designing, tuning and troubleshooting enterprise proxy services, including forward proxy architectures, PAC files, authentication, SSL/TLS inspection, certificate chains, proxy bypass requirements and Internet egress patterns. -Must
• Strong understanding of network traffic flows and protocols, including TCP/IP, DNS, HTTP/S, TLS, NAT, routing, switching, VPNs and load balancing. - Must
• Hands-on experience with Palo Alto Networks security technologies, including firewall policy, routing, segmentation, NAT, VPN and traffic or packet analysis. -Must
• Practical experience investigating endpoint security events and correlating endpoint activity with proxy and network telemetry. Experience supporting cyber security incidents and correlating endpoints, proxy and network telemetry to identify root cause and coordinate remediation.
• Strong working knowledge of security monitoring and log analysis, including correlation, dashboarding, and development or tuning of searches and alerts - Must. Experience troubleshooting complex connectivity issues across endpoints, proxies, firewalls, cloud services and upstream network paths, with the ability to interpret proxy logs, firewall logs, DNS results, TLS failures and packet captures -Must. Strong communication skills and the ability to guide initiatives, coordinate delivery, and drive continuous improvement.

Preferred:

Certification Preferred (Nice to have):

• Zscaler Digital Transformation Administrator (ZDTA)
• Network Security Professional