Threat Protection Administrator

Job Description

Insight Global is seeking a Threat Protection Administrator for a leading cybersecurity-focused client. This role sits at the intersection of network and security operations, acting as a critical liaison to ensure threat detection and mitigation strategies are effectively executed. The ideal candidate will bring hands-on expertise with Fortinet technologies and a strong understanding of firewall policy management, logging, and incident response. This individual will work closely with SOC and network engineering teams to tune threat protection systems, improve visibility, and strengthen overall security posture. Candidates with experience in manufacturing or OT environments and a proactive, analytical approach to cybersecurity will stand out.

• Administer and audit Fortinet Security Fabric tools and firewall configurations

• Tune and manage threat protection (IPS, AV, Anti-Bot, Web Filtering, SSL inspection)

• Monitor alerts/logs via FortiAnalyzer and SIEM tools

• Triage incidents and escalate confirmed threats

• Act as a liaison between network and security teams

• Support SOC with incident response and ensure proper network mitigation actions

• Deploy and manage configurations via FortiManager

• Maintain dashboards, reporting, and compliance tracking

• Optimize firewall policies and threat detection based on evolving risks

• Support VPNs, segmentation, and secure architecture reviews

• Ensure proper data flow (DNS, traffic logs, etc.) into security systems for accurate detection

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• Hands-on experience administering FortiGate firewalls

• Strong understanding of:

o Network security (firewalls, NAT, VPNs)

o Threat protection tools (IPS, Antivirus, Web Filtering, sandboxing)

o Security logging and alert analysis

• Experience with FortiManager and/or FortiAnalyzer

• Background working in SOC/SIEM environments

• Ability to audit firewall rules and identify misconfigurations or policy gaps

• Experience with incident triage and escalation • Fortinet certifications (NSE 4-level competency required; NSE 5/6/7 preferred)

• Additional certifications (CISSP, Security+, CCNA Security, GIAC)

• Experience securing OT/ICS (manufacturing/smart factory) environments

• SIEM/log correlation experience

• Scripting/automation (Python, APIs, Ansible)

• Knowledge of Zero Trust (ZTNA) and microsegmentation

• Exposure to DNS monitoring, content filtering, and network telemetry feeding security systems