Network Security Engineer

The role is part of a strategic cybersecurity project for a client in the automotive sector, focusing on network security assessment, strategic analysis, risk evaluation, technology assessment, and consulting.

• Several years of professional experience in network security, security architecture, cybersecurity consulting, or security assessments.
• Strong understanding of enterprise network architectures and modern network security concepts.
• Practical knowledge of NDR, IDS/IPS, network monitoring, threat detection, and security analytics.
• Good understanding of Zero Trust, SASE/SSE, cloud security, identity security, and modern enterprise security architectures.
• Experience with security risk analysis and the ability to translate identified risks into actionable recommendations.
• Experience evaluating cybersecurity technologies and comparing vendors and solution approaches.
• Strong analytical and problem-solving skills, with the ability to assess complex environments from both technical and strategic perspectives.
• Experience working in consulting or customer-facing roles, including presenting findings and recommendations to technical and management stakeholders.
• Ability to balance security requirements with business value, operational feasibility, and financial considerations.
• Excellent communication and presentation skills.
• Professional working proficiency in English.

• Assess the current network security architecture, security controls, monitoring capabilities, and overall security maturity.
• Analyze existing technologies and capabilities, including IDS, SIEM, EDR, ITDR, firewalls, OT segmentation, SD-WAN, cloud security, and network monitoring.
• Identify security gaps, risks, and areas for improvement and map them against current threat scenarios, security best practices, and modern cybersecurity frameworks.
• Evaluate the strategic role of Network Detection & Response (NDR) within the future network security architecture.
• Assess alternative and complementary approaches, including Zero Trust, SSE/SASE, cloud-native security monitoring, CASB, and identity-centric security controls.
• Define risk-based priorities and recommend measures delivering the highest potential risk reduction and business value.
• Conduct market and technology assessments and evaluate relevant security solution providers.
• Support a targeted RFI process and compare solutions based on functionality, scalability, operating model, resource requirements, and commercial considerations.
• Develop and maintain a shortlist of suitable technology and service providers.
• Assess potential internal, managed-service, and hybrid operating models, including opportunities for nearshore and offshore delivery.
• Translate business, security, and operational requirements into practical technical recommendations.
• Prepare management-ready presentations, decision frameworks, and strategic recommendations.
• Contribute to the development of a phased security roadmap covering campus networks, data centers, cloud environments, SD-WAN, and other critical infrastructure.
• Support the preparation and, where applicable, execution of a Proof of Concept (PoC), including evaluation criteria, test scenarios, solution validation, and high-level technical guidance.