{"id":2398084,"url":"https://alion.io/job/hkexgroup-network-security-specialist","title":"Network Security Specialist","company":{"id":1972923,"name":"HKEX","domain":"hkexgroup.com","url":"https://alion.io/company/hkexgroup","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":75,"open_postings":22,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":29},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"BGP","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"ITIL","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"OpenShift","optional":false},{"name":"OSPF","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Zscaler","optional":false}],"status":"live","first_seen_at":"2026-06-30T00:00:00Z","employer_posted_date":"2026-06-30","last_verified_at":"2026-10-13T22:43:22Z","board_verified":true,"closed_at":null,"days_open":105,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":105},"description":"Senior Network Security SpecialistShift Pattern:\nStandard 40 Hour Week (United Kingdom)Scheduled Weekly Hours:\n40Corporate Grade:\nD - Assistant Vice PresidentReporting Line:\n(UK Division) Information TechnologyLocation:\nUK-LondonWorker Type:\nPermanentAbout the London Metal Exchange\nThe London Metal Exchange (LME) is the world centre for industrial metals trading. Most of the world’s global non-ferrous futures business is conducted on the LME’s three trading platforms totalling $21 trillion, 191 million lots and 4 billion tonnes notional with a market open interest high of 2.1 million lots in 2025.\nThe metals community uses the LME, an HKEX Group company, as a venue to transfer or take on price risk, as a physical market of last resort and as the provider of transparent global reference prices.\nOverall Purpose of Role\nAs a Network Security Specialist, you will help design, implement and govern the network security controls that protect our modern, high-performance enterprise network. You will take a hands-on role in shaping the network security roadmap, defining security policies and standards that drive the adoption of Zero Trust and micro-segmentation across the organisation.\nWorking within the Connectivity Engineering Team, you will collaborate closely with Information Security, Platform, Infrastructure and Application teams to ensure security is embedded by design. Your expertise will be applied across on-premises, cloud, and containerised environments, ensuring consistent and robust protection across all connectivity layers. You will also support the organisation’s LAN, WAN, Campus and Data Centre network services, ensuring reliability, resilience and high performance. You will maintain and develop core network standards across related systems, coordinate network activities across multiple technology projects, contribute deep technical expertise and produce both high- and low-level designs. As a subject matter expert, you will also provide 3rd-line escalation support when required.\nThis role reports directly to the Network Manager and may include participation in an on-call rota, as well as occasional evening and weekend work. TOIL or overtime compensation will be available.\nResponsibilities:\nDesign, implement and maintain enterprise network security controls including firewalls, proxies and secure access services aligned to business and regulatory requirements.\nAct as the technical authority for Fortinet, Palo Alto Networks and Zscaler platforms.\nEnsure security policies are consistently enforced across data centre, campus, cloud and hybrid environments.\nLead complex troubleshooting of network security issues, balancing security, performance and availability.\nHelp to define the network security roadmap, aligned with wider technology and security strategies.\nDesign and evolve Zero Trust network architectures, including identity-aware access and least-privilege principles.\nDefine and implement micro-segmentation strategies for traditional and containerised workloads.\nProvide design input into new initiatives (cloud adoption, Kubernetes/OpenShift, automation, AI platforms).\nEvaluate new security technologies and patterns, producing clear recommendations and design artefacts\nDevelop and maintain network security standards, patterns and policy definitions.\nEnsure adherence to security policies through design reviews, operational controls and continuous improvement.\nPartner with Information Security to translate policy into enforceable technical controls.\nSupport audits, risk assessments and regulatory obligations by providing clear evidence of control implementation.\nAct as a technical leader within the Connectivity Engineering Team, mentoring engineers and setting best practice.\nWork closely with Infrastructure, Platform, and Application teams to embed security by design.\nProvide subject-matter expertise to project teams and senior stakeholders.\nPERSON SPECIFICATION:\nDesired Academic and Professional Qualifications:\nThe ideal candidate will have experience working within an ITIL-governed environment and established infrastructure support frameworks. They will hold a bachelor’s degree in Computer Science, Information Technology, or a related discipline, or possess an equivalent combination of education, technical training, and practical experience.\nRelevant industry certifications (e.g. PCNSE, NSE, CCNP Security, or CISSP) or substantial real-world application are expected, while ITIL and/or PMI certification is considered an advantage.\nRequired Knowledge and Level of Experience:\nMinimum 5 years’ experience operating in regulated, mission-critical environments (e.g., financial services, critical infrastructure), with deep hands-on expertise in enterprise network security engineering and large-scale network infrastructure support.\nExperience defining and implementing network segmentation and micro-segmentation strategies.\nStrong understanding of Zero Trust networking principles and identity-aware access controls.\nStrong experience designing, implementing and optimising firewall and proxy security policies.\nDeep hands-on experience with\nPalo Alto Networks (PAN-OS, Panorama, policy design\nFortinet (FortiGate, FortiManager, FortiAnalyzer)\nZscaler (ZIA, ZPA, Zero Trust Exchange)\nExperience securing hybrid environments spanning on-prem, cloud, and containerised platforms.\nExposure to security controls and design for Kubernetes/OpenShift.\nExperience with automation and infrastructure-as-code approaches for deploying security controls.\nWide exposure to routing, switching, load balancing and security architectures, with extensive operational and engineering experience.\nStrong grounding in core networking technologies and protocols, including:\nTCP/IP, BGP, OSPF, VLANs, VRF, VPN, VXLAN, NAT, ACLs, DNS.\nHands-on experience with packet capture and network analytics and monitoring tools.\nStrong understanding of ITILv3 processes, including incident, problem and change management.\nSkills and Competencies:\nAbility to translate high-level security policies into practical, scalable technical designs.\nStrong analytical and diagnostic skills for assessing complex network and security environments.\nCompetence in designing and optimising security architectures, network policies and segmentation models.\nAbility to work across hybrid and distributed environments (on-prem, cloud, container platforms).\nStrong capability to apply automation and IaC concepts to enhance security controls and operational efficiency.\nAbility to collaborate with cross-functional teams in highly regulated, high-availability environments.\nMethodical working approach, aligned to ITILv3 best practices with and proven ability to implement processes.\nWillingness to challenge existing approaches and drive change.\nStrong attention to detail with a focus on operational excellence.\nComfortable working under pressure, with changing priorities.\nA strong delivery mindset, setting and achieving realistic and timely execution of project deliverables across the portfolio.\nPersonal Qualities:\nStrong communicator with the ability to engage effectively with engineers, architects, and senior management.\nPragmatic and security-focused, balancing robust controls with delivery-oriented execution.\nStrategic thinker with a hands-on approach, comfortable navigating fast-paced and evolving technology landscapes.\nAnalytical, detail-driven, and process-oriented, able to translate complexity into clear actions and documentation.\nSkilled at influencing, persuading and guiding others toward the best technical and business outcomes.\nCollaborative team player and leader, with strong interpersonal skills and a passion for mentoring and developing others.\nAdaptable and dependable, able to work effectively across organisational boundaries and understand wider business drivers.\nCustomer-focused and responsive, demonstrating a strong sense of urgency and commitment to service.\nInnovative and proactive, continually seeking improvements in problem-solving, processes, and solution design.\nThe LME is committed to creating a diverse environment and is proud to be an equal opportunity employer. In recruiting for our teams, we welcome the unique contributions that you can bring in terms of education, ethnicity, race, sex, gender identity, expression & reassignment, nation of origin, age, languages spoken, colour, religion, disability, sexual orientation and beliefs. In\ndoing so, we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication.","description_format":"text","description_chars":8576,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security"],"lifecycle":[{"event":"open","at":"2026-10-12T22:50:07Z"}],"visa":[],"liveness":{"score":9,"band":"cold","label":"Long shot","p_open":1,"p_active":0.327,"p_room":0.28,"age_days":105,"expected_fill_days":38,"reasons":["conf:2","stale_co","win:tail","crowd:brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/hkexgroup-network-security-specialist","json_url":"https://alion.io/job/hkexgroup-network-security-specialist.json","meta":{"generated_at":"2026-10-13T23:45:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":36211,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1972923},"rest":"https://alion.io/mcp/rest/get_company?id=1972923"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhkexgroup-network-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhkexgroup-network-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhkexgroup-network-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hkexgroup-network-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhkexgroup-network-security-specialist"}]}