Cyber Defence Network Engineer

Join our Cyber Defence Centre as a Cyber Defence Network Engineer. In this role, you will be responsible for delivering the containment and recovery phases of live client security incidents, performing security assessments and hardening, and designing and implementing security solutions in client environments. You will work with various technologies and frameworks, including Microsoft 365, Azure, AWS, and NIST CSF. This position offers a range of benefits, including income protection, matched pension, life cover, private medical, and professional subscriptions.

Missions

• Delivering the containment and recovery phases of live client security incidents, including ransomware and business email compromise.
• Performing security reviews and configuration hardening across various platforms, including Microsoft 365, Azure, AWS, and on-premise Active Directory.
• Designing and implementing security solutions in client environments, from discovery and requirements gathering through build, testing, rollout, and handover.

Profil recherché

- Endpoint and detection: CrowdStrike Falcon (EDR, NG-SIEM, LogScale)

- Network security: Cisco (including Firepower), Palo Alto, FortiGate, SonicWall, Check Point, WatchGuard, Sophos, Zyxel and F5. Firewall policy design and review, IPS/IDS, site-to-site and remote access VPN, and SSL/TLS inspection

- Cloud: Microsoft Azure (NSGs, Azure Firewall, Azure Policy, Defender for Cloud), Microsoft 365 and Entra ID (conditional access, PIM, Entra Connect), AWS and Oracle Cloud. Terraform for infrastructure as code

- SASE and Zero Trust: Netskope One, Secure Web Gateway, CASB, Private Access (ZTNA) and DLP. Client deployment, steering configuration, tenant configuration and troubleshooting

- Identity: Active Directory, Entra ID, Group Policy, RBAC and privileged access

- Frameworks: NIST CSF and NIST 800-53, CIS Benchmarks, and ISO 27001

- Networking: LAN/WAN, VLAN segmentation, layer 2 / layer 3 access control, routing and switching, DMZ architecture, DNS and DHCP. A background as a network engineer prior to moving into security

- Beyond this, you will hold, or be working towards, a relevant combination of the following:

- AWS Certified Cloud Practitioner

- Cisco Certified Entry Networking Technician (CCENT)

- Microsoft Certified: Azure Fundamentals (AZ-900)

- Microsoft Certified Technology Specialist (MCTS)

- You will hold, or be actively working towards, the Netskope Certified Cloud Security Integrator (NCCSI). This is a minimum criterion for the role

- ITIL Foundation v3

- Microsoft Certified: Security, Compliance and Identity Fundamentals (SC-900)

- Cisco Certified Network Associate (CCNA)

- Oracle Cloud Infrastructure Foundations Associate

- Attention to detail: Careful and precise when making changes in live client environments, with high-quality, accurate documentation of every action taken

- Time management: Able to prioritise effectively while managing multiple engagements and ensuring SLAs, KPIs and client deadlines are met

- Problem solving: Strong troubleshooting skills and the ability to develop solutions quickly and effectively during active incidents

- Adaptability: Able to embrace and manage change effectively, continuously developing skills to meet the demands of an evolving threat landscape

- Teamwork and collaboration: Comfortable working closely with DFIR, SOC, Cyber Advisory and client technical teams. Collaboration is essential during incident response

- Communication: A clear and confident communicator with strong written and verbal skills, particularly in high-pressure scenarios. Able to translate technical detail for non-technical audiences, including clients, vendors and senior stakeholders

- Analytical thinking: Able to analyse complex environments and data, identify patterns and make evidence-based decisions