Network Security Engineer

Key Responsibilities

• Prisma Access Operations
• Monitor and maintain a single-tenant Prisma Access deployment using Panorama and Prisma Access portals
• Manage GlobalProtect configurations, user onboarding, authentication issues, and agent connectivity
• Implement standard security policy changes, URL filtering updates, App-ID tuning, and rule management
• Perform basic troubleshooting of tunnels, portals, gateways, configuration sync, and service health
• Incident Management（L1 / L2）
• Triage and resolve incidents through ServiceNow, aligned with defined SLAs and ITIL processes
• Analyze security, traffic, and tunnel logs via Cortex Data Lake and Panorama Logging Service
• Independently handle P3 / P4 incidents and support senior engineers on P1 / P2 issues
• Clearly communicate incident status, impact, and resolution to stakeholders
• Change & Maintenance Activities
• Execute security policy changes, address objects, and rule updates under strict MOP / Change Management controls
• Support planned maintenance windows, content/antivirus updates, and minor platform upgrades
• Ensure proper documentation, rollback planning, validation steps, and post-change reporting
• Platform Monitoring & Reporting
• Monitor Prisma Access gateway and portal health, license consumption, bandwidth usage, and capacity metrics
• Generate operational and security reports using Cortex Data Lake and Splunk
• Conduct daily health checks and provide clear shift handover documentation
• Documentation & Compliance
• Maintain and update SOPs, runbooks, knowledge articles, and incident records
• Keep accurate configuration records and audit artifacts for compliance and customer reviews
• Adhere strictly to internal security governance and ITIL-aligned operational processes

Required Skills & Experience

Professional Experience

• 2–4 years of experience in network, security, or infrastructure operations

（NOC / SOC / Infra Ops）

Core Technical Knowledge

• TCP/IP, subnetting, routing fundamentals, DNS, DHCP
• NAT, VPN fundamentals, SSL/TLS concepts
• Firewall policy logic and rule evaluation order

Palo Alto / Security Platform Exposure

• Palo Alto Panorama basics（device groups, templates）
• GlobalProtect user connectivity and troubleshooting workflows
• Prisma Access architecture（tenant, portal, gateway concepts）
• Experience using ServiceNow for incident and change management
• Basic experience with Cortex Data Lake queries and Splunk searches

Operational & Troubleshooting Skills

• Ability to logically isolate issues across network, authentication, policy, and client layers
• Fact-based log analysis rather than assumption-driven troubleshooting
• Ability to escalate with clear reproduction conditions and findings

OS / Platform Fundamentals

• Basic Linux knowledge (log concepts, basic command familiarity)
• Basic Windows knowledge related to certificates, proxies, and endpoint connectivity

Customer-Facing & Professional Skills

• Clear and polite Japanese business communication (email, chat, meetings)
• Ability to explain incidents, changes, and limitations in a structured manner

（Conclusion → Impact → Action → Next Steps）

• Strong sense of operational responsibility and risk awareness
• Calm, professional behavior during incidents and service disruptions
• Ability to maintain accurate records and explain past actions when required

Education

• Bachelor’s degree required.

Language Requirements

• Japanese: Native-level proficiency

（Customer communication, documentation, meetings）

• English: Business-level proficiency

（Global team collaboration, vendor communication, documentation）

Certifications & Nice-to-Have Skills

Certifications（Preferred）

• Palo Alto Networks: PCCSA, PCNSA
• Security / Governance: CISSP, CISM, CISA
• ITIL Foundation

Certifications are not mandatory; equivalent hands-on experience and security mindset are acceptable.

Additional Skills（Nice to Have

• Knowledge of authentication protocols (SAML, LDAP, RADIUS)
• Cloud fundamentals (Azure / AWS basics)
• Basic scripting (Python / PowerShell) for operational efficiency
• Exposure to traffic analysis tools, packet captures, or firewall audit