Cyber Security Network Engineer - 2 year Fixed-Term Contract in London

My client, an International Bank, is looking for a Cyber Security Network Engineer to join them on a Fixed‑Term contract for 2 years.

This role does not offer sponsorship and you will need to be in the office 5 days per week (in London).

However, there is a chance you can work one day per week from home (either Monday or Friday).

About the Cyber Security Network Engineer Role

My client are seeking a motivated, hands‑on and experienced Cyber Security Network Engineer with experience in the banking industry, ideally with Oracle Flexcube and Oracle Banking Digital Experience (OBDX).

The role owns the bank’s technical security posture, protects systems from cyber threats, and manages perimeter and application security platforms.

It bridges the gap between infrastructure engineering and threat management, ensuring high availability, robust defence‑in‑depth, and strict regulatory compliance across all banking networks.

Responsibilities

• Vulnerability Management
• Run regular vulnerability scans across networks, applications, and endpoints; triage findings based on business risk and CVSS scores, and coordinate rapid remediation with IT operations teams.
• Track, analyze, and report on vulnerability lifecycle metrics and KPIs for senior leadership and regulatory oversight bodies.
• Validate the effectiveness of deployed patches and configuration changes via targeted follow‑up scans.
• Security Infrastructure Ownership
• Manage and maintain Cisco Firepower firewalls, including complex rule set architecture, IPS/IDS signature tuning, URL filtering, and malware protection policies.
• Administer F5 WAF (Advanced WAF / ASM) to protect online banking portals, API endpoints, and mobile banking backends against OWASP Top 10, credential stuffing, and advanced bot attacks.
• Manage Citrix ADC / Net Scaler load balancers, ensuring secure traffic distribution, robust TLS/SSL cipher suite configuration, and secure session management.
• Maintain secure Remote Access VPNs, site‑to‑site IPsec tunnels, and network access control (NAC) policies to enforce micro‑segmentation.
• Threat Detection & Response
• Monitor, analyze, and triage alerts from the Security Information and Event Management (SIEM) platform, acting as a technical escalation point for the SOC.
• Develop, test, and tune custom detection use cases, correlation rules, and alert logic to improve detection quality and reduce false positives.
• Support incident response phases (containment, eradication, recovery) during active network‑level cyber security incidents.
• Security Hardening & Architecture
• Establish, update, and enforce secure configuration baselines (e. g., CIS Benchmarks) for Windows servers, Linux/Unix environments, and core network devices.
• Design and audit zone‑based network segmentation to isolate critical banking environments (e. g., SWIFT, card processing, core banking) from untrusted networks.
• Change Management Governance & Discipline
• Author comprehensive change requests detailing exact technical steps, complete documentation, precise impact assessments, and zero‑downtime execution windows.
• Mandate and execute thorough pre‑implementation testing in non‑production environments to validate security policies, rules, and configurations before live deployment.
• Design, document, and test explicit, step‑by‑step rollback procedures for every infrastructure change to guarantee immediate service restoration in the event of failure.
• Lead and participate in peer‑review cycles for complex network and security modifications to maintain institutional standards and eliminate single points of failure.
• Project Security & Compliance
• Perform technical security reviews and threat modelling for new infrastructure projects, cloud migrations, and standard change requests.
• Coordinate annual penetration testing cycles with external vendors, validate findings, and track remediation of identified flaws.
• Ensure all network security controls comply with industry standards and best practice.

Experience & Skills

• 5+ years of experience in network engineering with a heavy focus on cyber security, ideally within a regulated financial institution or enterprise environment.
• Proven hands‑on experience configuring and troubleshooting Cisco Firepower, F5 ASM/WAF, and Citrix Net Scaler.
• Strong understanding of core networking protocols (BGP, OSPF, EIGRP), the TCP/IP stack, and advanced cryptographic protocols (TLS 1.3, SSH, IPsec).
• Desired

Certifications: CISSP, CISM, CEH, CCNP Security, Cisco Certified Specialist – Network Security Firepower, F5‑CA/F5‑CTS, Citrix Certified Professional – Networking (CCP‑N).

• Strong collaborative skills to work effectively alongside standard IT infrastructure and Dev Ops teams.
• Excellent technical writing skills for creating clear, compliant security documentation and architecture diagrams.
• Job Details
• Contract Type: Permanent (Fixed‑Term for 2 years)
• Specialism: Technology & Digital
• Focus: Information Security
• Industry: Banking
• Workplace Type: On‑site in London (must attend 5 days per week; one‑day‑per‑week remote possible)
• Experience Level: Senior Management
• Location: London, UK

Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates.

#J-18808-Ljbffr