ICT Senior Network Engineer

Senior Network Engineer, AVP
Job Title: Senior Network Engineer, AVP
We are seeking a highly skilled and experienced Network Engineer to join our dynamic Data Security team. This role is critical in protecting Deutsche Bank's sensitive data assets across our hybrid cloud environment, ensuring compliance with regulatory requirements, and safeguarding against evolving cyber threats. The ideal candidate will possess deep technical expertise in Data Security Posture Management (DSPM) tools, a strong understanding of DevOps principles and practices, and hands-on experience in network security.

As part of our flexible scheme, here are just some of the benefits that you'll enjoy

• Best in class leave policy
• Employee Assistance Program for you and your family members
• Accident and Term life Insurance

~ Data Security Posture Management (DSPM):
ai, Symmetry Systems, Cyera, Laminar, Microsoft Purview) to discover, classify, and protect sensitive data across on-premises and multi-cloud environments (AWS, Azure, GCP).
Develop and enforce data security policies, standards, and controls based on risk assessments and regulatory requirements (e.g., Monitor DSPM tools for data security incidents, policy violations, and anomalous activities, and lead incident response efforts related to data breaches.
Conduct regular data risk assessments, identifying vulnerabilities and recommending remediation strategies to enhance data security posture.
Generate reports and dashboards on data security posture, compliance, and risk for management and audit purposes.
Stay abreast of the latest DSPM technologies, threats, and best practices, continuously evaluating and recommending improvements to our data security program.

DevOps Security Integration:
Integrate security controls and best practices into the entire DevOps pipeline (CI/CD) to ensure security is 'shifted left.'
Collaborate with development and operations teams to embed data security considerations into application design, development, and deployment processes.
Implement and manage security tools for static application security testing (SAST), dynamic application security testing (DAST), software composition analysis (SCA), and infrastructure as code (IaC) security scanning.
Python, PowerShell) and orchestration tools.
Provide security guidance and training to development and operations teams on secure coding practices and data protection principles.

Networking and Infrastructure Security:
Design, implement, and maintain secure network architectures, including firewalls (next-gen, web application), intrusion detection/prevention systems (IDS/IPS), VPNs, and micro-segmentation solutions.
Configure and manage network security policies, access controls, and routing to protect sensitive data flows.
Perform network vulnerability assessments and penetration testing to identify and remediate security weaknesses.
Monitor network traffic for suspicious activity, anomalies, and potential threats, utilizing SIEM and network forensics tools.
Troubleshoot network security issues and provide expert guidance on remediation.
Ensure secure configuration and hardening of operating systems, databases, and other infrastructure components.

Contribute to the development and enhancement of Deutsche Bank's overall cyber security strategy.
Participate in security incident response, forensic analysis, and post-mortem activities.
Mentor junior team members and share knowledge on data security best practices.
Maintain detailed documentation of security configurations, procedures, and architectural diagrams.

Your skills and experience

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field.
• 5+ years of hands-on experience in Information Security, with a strong focus on Data Security.
• Proven hands-on experience with DSPM tools (e.g., ai, Symmetry Systems, Cyera, Laminar, Microsoft Purview) including implementation, configuration, and operational management.
• Strong understanding and practical experience with DevOps methodologies and tools (e.g., Git, Jenkins, Azure DevOps, GitLab CI/CD, Ansible, Terraform).
• In-depth knowledge and hands-on experience in network security concepts and technologies , including firewalls (e.g., Palo Alto, Check Point, Cisco ASA), IDS/IPS, VPN, WAF, DNS security, and network segmentation.
• Experience with cloud security principles and services in at least one major cloud provider (AWS, Azure, or GCP).
• Proficiency in scripting languages such as Python or PowerShell for automation and data analysis.
• Experience with regulatory compliance requirements relevant to financial services (e.g., Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex security issues to both technical and non-technical audiences.

~ Desired Skills and Experience (Nice to have):
CISSP, CISM, CISA, CCSP, OSCP, Azure/AWS Security Specialty).
Experience with data loss prevention (DLP) solutions.
Familiarity with containerization technologies (Docker, Kubernetes) and their security implications.
Experience with Security Information and Event Management (SIEM) platforms (e.g., Splunk, Microsoft Sentinel).
Knowledge of database security and data encryption technologies.

Strong problem-solving and analytical skills to assess security threats and data exposure risks.
Ability to work cross-functionally with Security, IT, and Risk teams.
Effective written and verbal communication skills, especially when documenting security configurations and investigations.
Training and development to help you excel in your career
Coaching and support from experts in your team
A range of flexible benefits that you can tailor to suit your needs

Please visit our company website for further information:

We strive for a in which we are empowered to excel together every day. Together we are Deutsche Bank Group.