Cyber Defense Network Engineer: Incident Response

Grant Thornton (UK); Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Grant Thornton UK invites a skilled Network Engineer to join our Cyber Defence Centre in the UK. This hands-on role covers incident containment, security assessment, and the delivery of managed security solutions across client environments.

You will help implement Zero Trust, SASE, and cloud/workload security using modern tooling and cross-functional collaboration with DFIR/SOC teams.

Qualifications

• Background in network engineering with security outcomes.
• Active pursuit or holding NCCSI certification.
• Industry-recognised security and networking qualifications desirable.

Responsibilities

• Deliver containment and recovery for live client incidents with emphasis on rapid remediation.
• Perform security reviews and hardening across multi-cloud and on-premises estates.
• Design and implement security solutions from discovery to handover for client environments.
• Work on Zero Trust, SASE, and data protection initiatives within client networks.

Skills

LAN/WAN

VLAN segmentation

Layer 2/3 access

Routing & Switching

DMZ architecture

DNS/DHCP

Firewall design

Cisco Firepower

Palo Alto

FortiGate

SASE

Zero Trust

Netskope One

CASB

Entra ID

Azure

Azure Firewall

Azure NSGs

M365 & Entra ID

AWS

Oracle Cloud

Terraform

CrowdStrike Falcon

EDR

RBAC

NIST CSF

CIS Benchmarks

ISO27001

Education

NCCSI certification

CCNA

CCENT

AWS Cloud Practitioner

AZ-900

SC-900

OCI Foundations

MCTS

ITIL Foundation

Tools

Prowler

ScubaGear

PingCastle

Job description

Grant Thornton UK invites a skilled Network Engineer to join our Cyber Defence Centre in the UK. This hands-on role covers incident containment, security assessment, and the delivery of managed security solutions across client environments.

You will help implement Zero Trust, SASE, and cloud/workload security using modern tooling and cross-functional collaboration with DFIR/SOC teams.