Network Security Analyst

Join the L1 NOC Team as a Network Security Analyst at ZEISS India, located in the vibrant city of Bengaluru. In this role, you will be instrumental in safeguarding our modern and innovative network infrastructure. Your responsibilities will include identifying and analyzing potential service disruptions and security breaches by leveraging log files, performance tests, monitoring systems, and ticket systems. You will collaborate closely with various departments, cloud providers, and service providers to ensure swift resolution. Furthermore, you will be responsible for operating and monitoring Zeiss Cloud Proxy, VPN, CDN, and WAF systems, proactively detecting abnormal behavior, analyzing potential threats, and responding promptly to security incidents.

We are seeking candidates with 1-3 years of experience or foundational knowledge in incident, request, and change management. A solid understanding of incident analysis, evidence collection, documentation, communication, reporting, and response is essential.

Key Technology Experience (Any One of the Following):

• Option A: Zscaler (ZIA & ZPA)
• Working knowledge of Zscaler Internet Access (ZIA) components: URL filtering, DNS filtering, SSL inspection, cloud firewall, bandwidth control, and threat protection.
• Understanding of Zscaler Private Access (ZPA) architecture: App Connectors, private application segmentation, Zero Trust Network Access (ZTNA), and access policy design.
• Familiarity with Zscaler Client Connector, authentication flows (SAML, SCIM, Azure AD), and user provisioning.
• Basic understanding of Zscaler log flows, policy troubleshooting, and traffic analysis using Zscaler logs and packet captures.
• Basic knowledge of ATP, sandboxing, antivirus, IPS/IDS, SSL inspection, etc.
• Option B: Akamai (CDN & WAF)
• Understanding of Akamai CDN architecture, including cache hierarchy, TTL behaviors, edge delivery, and performance optimization techniques.
• Experience working with Akamai Control Center configuration property manager, rulesets, CP codes, edge redirects, and application delivery optimizations.
• Knowledge of Akamai WAF (Bot Manager / DOS Protection), including policy tuning, rule customization, false positive analysis, and threat detection.
• Ability to analyze CDN or WAF logs, troubleshoot edge behavior, and interpret security event dashboards.
• Option C: SD-WAN
• Understanding of SD-WAN overlay/underlay architecture, dynamic multipath optimization (DMPO), and hybrid WAN design.
• Experience with routing protocols used in SD-WAN (BGP, OSPF, static routing) and policy-based routing.
• Ability to troubleshoot link performance issues, including packet loss, jitter, latency, and MOS scoring.
• Exposure to branch-to-Hub and branch-to-branch routing, firewall policies, segmentation, and VCMP tunnels.
• Familiarity with orchestrator or controller platforms for configuration, monitoring, and policy deployment.
• Basic understanding of WAN circuits, ISP interactions, and last-mile troubleshooting.
• Preferably with CCNA and CCNP certification.

General Requirements:

• Basic knowledge of networking fundamentals (OSI model, TCP/IP, routing, switching, services).
• Good understanding of network protocols, ports, and common application services.
• Hands-on experience with network troubleshooting tools: tcpdump, WinMTR, nslookup, netstat, traceroute, etc.
• Experience using analysis tools such as Wireshark, Fiddler, browser developer tools, etc.
• Ability to troubleshoot web applications, connectivity issues, and network performance problems.
• Familiarity with major operating systems (Windows, Linux) and common browsers (Edge, Chrome, Firefox, Safari).
• Strong communication and documentation skills in English (written and verbal).
• Solid time management and task-prioritization skills.
• Willingness to work 24x7 rotational shifts and be available on-call when required.

Your ZEISS Recruiting Team: Saptarshi Chowdhury