Cyber Defence Network Engineer: Incident Response & ZeroTrust

Grant Thornton UK LLP; Greater London; On-site; GBP 65,000 - 105,000; Full time

Job summary

Grant Thornton UK LLP is seeking an experienced Network Engineer for the Cyber Defence Centre. You will handle containment and recovery for live incidents, perform security reviews, and design secure client-ready solutions across cloud and on-premises environments. Strong focus on Zero Trust, SASE, and CIS benchmarks is required.

The role involves hands-on incident response, hardening, and collaboration with DFIR/SOC teams to reduce risk and improve client security postures.

Qualifications

• Background in network engineering focused on security outcomes.
• Security-focused role experience (36+ months) preferred.
• Netskope Certified Cloud Security Integrator (NCCSI) is a prerequisite or in progress.

Responsibilities

• Deliver containment and recovery phases of live client incidents.
• Perform security reviews and configuration hardening.
• Design and implement security solutions in client environments.
• Work on Zero Trust access programmes and SASE deployments.

Skills

LAN/WAN

VLAN segmentation

Layer 2/3 access control

Routing and switching

DMZ architecture

DNS and DHCP

Netskope One

SASE / Zero Trust

Entra ID / Azure / 365

Terraform

Tools

Cisco Firepower

VPN configuration

Prowler

ScubaGear

PingCastle

CrowdStrike Falcon

MS Azure

Entra ID

Job description

Grant Thornton UK LLP is seeking an experienced Network Engineer for the Cyber Defence Centre. You will handle containment and recovery for live incidents, perform security reviews, and design secure client-ready solutions across cloud and on-premises environments. Strong focus on Zero Trust, SASE, and CIS benchmarks is required.

The role involves hands-on incident response, hardening, and collaboration with DFIR/SOC teams to reduce risk and improve client security postures.