Senior Network Security Analyst

As a member of the L3 NOC Team, the Senior Network Security Analyst will be responsible for independently analyzing and resolving complex network and security incidents, ensuring service stability, and driving continuous operational improvement. The role involves monitoring and troubleshooting Zeiss Cloud Proxy, VPN, CDN, WAF, SD-WAN, RAS and SSE services using logs, monitoring platforms, packet captures, and performance data. The Senior Analyst will collaborate with Service Owners, internal teams, and external providers to drive incidents to resolution.

The Senior Network Security Analyst is expected to act as a technical escalation point and role model within the team, demonstrating strong accountability, ownership, initiative, and leading from the front attitude. The engineer should be willing to take ownership of projects and operational improvements end-to-end and drive them from the front. Expertise in all three i.e. SSE, WASP and WAN handle is not mandatory. The candidate should possess strong hands-on expertise in at least one of these areas, with WASP expertise being preferable. Proficiency in a second technology domain is highly desirable and would be considered an added advantage for this position. The candidate should demonstrate the ability and willingness to develop knowledge across the remaining technology areas

Possesses a strong understanding of Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) architecture, including forwarding methods, App Connectors, ZEN/VZEN components, and authentication workflows.

Demonstrates working knowledge of OSI layers and protocol behaviors (TCP/UDP, HTTP/S, DNS, FTP) as applied to Zscaler traffic flows.

Understands and applies Zscaler policy structures including URL filtering, access control, authentication policies, SSL inspection, and cloud firewall.

Independently troubleshoots complex connectivity, policy, authentication, and performance issues using logs, packet captures, and endpoint data.

Leads TAC cases with structured diagnostics, troubleshooting evidence, testing results, and clear communication.

Displays strong collaboration and communication skills with Service Owners, peers, and cross-functional teams.

Adheres to operational processes, identifies gaps in SOPs/KBs, and demonstrates situational awareness to enhance overall NOC operations.

Acts as a technical escalation point and supports junior engineers with complex troubleshooting.

Strong understanding of SD-WAN architecture, overlay tunnels, routing, business policies, path selection, DMPO, and WAN transport.

Interprets edge monitoring dashboards (Network Overview, QoE scores, link statistics) to identify performance anomalies and trends.

Supports day-to-day configuration, monitoring, and basic troubleshooting of edge connectivity, routing behavior, path changes, and business policies.

Accesses Fortinet firewalls and WAN transport devices to review configurations, analyze logs, and correlate root causes.

Identifies anomalies in routing, path selection, DMPO behavior, or link degradation and raises actionable escalations to the appropriate teams.

Provides structured and timely ticket updates, ensuring clear communication with peers and Service Owners.

Contributes to SOP/KB improvements, documenting operational learnings and best practices for future team benefit.

Possesses strong knowledge of networking fundamentals including the OSI model, TCP/IP, routing, switching, and common network services, with the ability to extend this into cross-functional areas such as DNS resolution, IP reachability, and basic firewall rule checks when guided.

Demonstrates strong understanding of network protocols, ports, and common application services, and is able to apply this knowledge while collaborating across teams (e.g., firewall, DNS, or infrastructure teams).

Strong hands-on experience with network troubleshooting tools such as tcpdump, WinMTR, nslookup, netstat, traceroute, supporting cross-functional diagnostic tasks following defined standards.

Good experience using analysis tools like Wireshark, Fiddler, and browser developer tools, enabling structured troubleshooting of web applications and mid-level connectivity issues.

Capable of troubleshooting web applications, connectivity issues, and network performance problems, while ensuring activities align with organizational security, compliance, and governance requirements.

Familiar with major operating systems (Windows, Linux) and commonly used browsers (Edge, Chrome, Firefox, Safari).

Demonstrates strong communication and documentation skills, actively contributing to SOP/KB accuracy and updates, and ensuring work is consistent with compliance expectations.

Shows solid time management and task-prioritization abilities, effectively coordinating with peers and cross-functional teams.

Demonstrates leadership through mentoring, knowledge sharing, and technical guidance to junior team members.

Willingness to work in 24×7 rotational shifts, provide on-call support as required, and assist with cross-functional operational tasks such as basic data center coordination (case submissions, labeling, access requests) when needed. Willingness to work 24x7 rotational shifts and be available on-call when required.

Your ZEISS Recruiting Team: