Cyber Defence Network Engineer

b Overview /b p In this role you will be a hands-on Network Engineer in the Cyber Defence Centre, supporting live incidents and security hardening while designing and delivering managed security solutions. You’ll work with cross-functional teams to contain, recover, and harden client estates, aligning with NIST, CIS benchmarks, and industry best practices. The position offers exposure to cutting-edge security technologies and a clear progression path within a collaborative security-focused environment. You’ll impact clients by preventing attacker access and reducing future risk. /p b Pay / Benefits /b ul li inclusive culture /li li work life balance /li li clear progression opportunities /li li cross-functional collaboration /li li supportive security teams /li li opportunity to work with leading security technologies /li /ul b Responsibilities /b ul li Containment and recovery of live client incidents, including ransomware and business email compromise /li li Isolating affected systems and restricting compromised identities to prevent spread /li li Preserving logs and assisting forensic investigations /li li Supporting client recovery and prioritised remediation sequencing /li li Implementing remediation and hardening work post-incident /li li Security reviews and hardening across cloud and on-premises environments /li li Designing and implementing security solutions from discovery to handover /li li Zero Trust/SASE deployment work (Netskope One) and related access controls /li li Designing network segmentation, DLP, and data classification policies /li li Producing security architecture artefacts, playbooks and deployment guides /li li Adhering to NIST CSF, CIS benchmarks, and ISO 27001 frameworks /li li Collaboration with DFIR, SOC, Cyber Advisory and client teams /li /ul b Key requirements /b ul li 36 months in a security-focused network role /li li Netskope Certified Cloud Security Integrator (NCCSI) either held or actively pursued /li li Networking expertise (LAN/WAN, VLAN, routing, switching, DMZ) /li li Firewall and VPN/IPS/IDS experience across multiple vendors /li li SASE and Zero Trust experience with Netskope One /li li Cloud familiarity with Azure, Entra ID, AWS; Terraform for IAC /li li Endpoint security with CrowdStrike Falcon /li li Identity management with AD/Entra ID and PIM /li li Knowledge of NIST CSF, NIST 800-53, CIS Benchmarks, ISO 27001 /li li Security governance and regulatory standards (GDPR, Cyber Essentials Plus, PCI DSS) /li li Strong communication and collaboration skills /li /ul ul li Clear and confident communicator under pressure /li li Analytical thinking and evidence-based decision making /li li Problem solving during active incidents /li li Netskope One (SASE, Secure Web Gateway, CASB, Private Access) /li li Firewall design and review (Cisco Firepower, Palo Alto, FortiGate, etc.) /li li VPNs, IPS/IDS, SSL/TLS inspection /li /ul