ph3Lead for Network Security Infrastructure Observability /h3 pAs the Lead for Network Security Infrastructure Observability, you will be the primary architect and engineer responsible for the health, availability, and performance of our global security infrastructure. This hands‑on technical leadership role requires a solid foundation in Network Security engineering and focuses on observability, reliability and performance of security controls across devices and platforms. /p h3Job Responsibilities /h3 ul liInfrastructure Architecture, Design Build /li liSecurity‑Aware Monitoring Architecture: Architect and design a general visibility framework for understanding the key performance, health, and throughput indicators of core security appliances across services such as Edge Firewalls, Network Access Control (NAC), DDoS Mitigation, Network Authentication, Internal Network Segmentation, and VPNs /li liObservability Engineering: Build and deploy the observability toolchain specifically optimized to monitor the hardware and virtualized instances of Palo Alto, Fortinet, and Cisco ISE /li liLogicMonitor Development: Hands‑on creation and tuning of DataSources and ConfigSources to capture hardware‑level security telemetry (CPU/Data Plane utilization, Session counts, Tunnel health, and HA synchronization) /li liService Health Dashboarding: Design and build real‑time operational dashboards that provide a clear view of the health, performance, and compliance status of the global security infrastructure /li liInfrastructure Operations Evolution /li liGlobal Service Operations: Operate the global monitoring environment, ensuring the continuous health of the observability stack across diverse network segments and security zones /li liInfrastructure‑as‑Code (IaC): Leverage APIs and automation (Python/GitLab) to automate the provisioning of monitoring for new security devices, ensuring a “security‑first” approach to visibility /li liCapacity Performance Management: Analyze long‑term infrastructure trends to provide data‑driven recommendations for capacity scaling, especially as it relates to resource‑intensive security features like SSL Decryption and IPS /li liReliability Alerting:



Establish and tune proactive alert thresholds that identify hardware or software degradation within the security stack before it impacts service delivery /li liOperational Excellence System Visibility /li liInfrastructure Diagnostics: Use tools like Wireshark and SNMP Walk to troubleshoot complex connectivity issues between the observability platform and security devices, resolving MIB/OID mismatches in secured management planes /li liTechnical Reliability Documentation: Develop comprehensive runbooks and technical guides for the ongoing operation, maintenance, and troubleshooting of the monitoring ecosystem /li liCollaborative Engineering: Partner with Network and Security Engineering squads to align monitoring setups with the deployment of new architectural security standards /li liProactive Maintenance: Proactively identify and resolve potential monitoring gaps by staying updated on hardware telemetry updates and the latest secure SNMP (v3) implementation standards /li /ul h3Education Experience /h3 ul liSolid Security Foundation: 3-4 years of experience in Network Security Engineering or Infrastructure Reliability, with a deep understanding of firewall architectures and network access control systems /li liProfessional Experience: Proven track record of designing and operating monitoring solutions for large‑scale enterprise security infrastructure /li liScale Scope: Proven experience in architecting and operating solutions at a global scale /li liEducational Background: Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or a related technical field /li /ul h3Technical Skills /h3 ul liSecurity Infrastructure Mastery: Expert‑level knowledge of the operational mechanics and hardware architectures of Palo Alto Firewalls, Fortinet Firewalls, and Cisco ISE /li liNetworking Security Foundations: Strong foundation in TCP/IP, UDP, and the OSI model,



with a specific focus on how security protocols (SSL/TLS, IPsec, RADIUS/TACACS+) interact with management and data planes /li liObservability Stack: Mastery of LogicMonitor (Collectors, DataSources) and experience with broader toolchains like Splunk, ELK, or Grafana /li liNetwork Protocols: Expert knowledge of SNMP (v2c/v3), MIBs, OIDs, and the ability to interpret security‑specific device telemetry /li liDevOps Automation: Proven ability to automate infrastructure tasks using Python, Groovy, GitLab, and GitLab‑CI /li liCertification: Professional certifications in Network Security (e.g., PCNSE, CCNP Security) or Monitoring (LogicMonitor Certified Professional) /li liCloud Infrastructure Monitoring: Knowledge of monitoring virtualized security appliances in AWS, Azure, or GCP /li liForensic Diagnostics: Proficiency in Wireshark for analyzing management‑plane traffic and SNMP communication within secured networks /li /ul h3Leadership Skills /h3 ul liCommunication: Strong ability to build trust with network and infrastructure experts and explain complex security policy concepts to non‑technical stakeholders /li liInnovation Curiosity: A relentless passion for staying ahead of threat actors by researching emerging network security trends and automated enforcement techniques /li liThriving in Ambiguity: Ability to navigate global complexity and drive clarity when translating high‑level security requirements into functional network policies /li liSelf‑Starter: Proven ability to manage technical workstreams from concept to production with minimal supervision, taking full ownership of the Edge Defense product lifecycle /li /ul h3Additional Qualifications /h3 ul liDemonstrated ability to mentor colleagues with less experience and provide guidance on cybersecurity best practices and analysis techniques /li liStrong facilitation, communication, and conflict resolution skills to ensure alignment across multiple product squads and complex stakeholder networks /li liDemonstrated interpersonal, collaborative and commitment to operational excellence skills /li /ul pbRoche is an Equal Opportunity Employer. /b /p /p #J-18808-Ljbffr

📌 Cybersecurity Engineer for Network Security observability (Madrid)
🏢 Roche
📍 Madrid