ForeScout Security Engineer

Job Title: ForeScout Security Engineer (Network Security Engineer)Location: New York, NY 10016 - On-site Mon - FriDuration: 6 Month Contract to Hire (Full-time)Job Scope:Seeking a Network Security Engineer with strong hands-on expertise in ForeScout to support enterprise security operations, device visibility, segmentation, and policy enforcement across a complex healthcare environment. This role will work closely with security, network, clinical, SOC, and infrastructure teams to strengthen Zero Trust posture, improve compliance, and support secure onboarding of enterprise, IoT, and medical devices.Responsibilities:Monitor and tune the ForeScout platform for device visibility, classification, and policy enforcementReview and optimize Palo Alto firewall policies to support segmentation and threat preventionSupport application delivery and access policies on F5 BIG-IP, including LTM, APM, and WAFInvestigate security alerts through SIEM tools such as SplunkCoordinate remediation efforts with SOC, infrastructure, network, and clinical teamsSupport secure onboarding of devices, especially IoT and medical devicesDocument changes and maintain SOPs, runbooks, and operational proceduresAssist with L2/L3 escalations related to network security platformsDrive continuous improvements in segmentation, compliance, and Zero Trust security postureQualifications:Strong primary expertise with ForeScout — requiredExperience monitoring, tuning, and managing ForeScout for device visibility, classification, and policy enforcementHands-on experience with Palo Alto Networks NGFWFamiliarity with F5 BIG-IP, including LTM, APM, and/or WAFUnderstanding of identity protocols and access control conceptsSIEM experience, preferably SplunkKnowledge of segmentation, threat prevention, Zero Trust, HIPAA, and NIST frameworksAbility to support L2/L3 security escalations in an enterprise environmentAny of the follow certifications would be a plus, not required – CISSP, CCNP Security, or CEH