Network Security Engineer

JR United Kingdom; London; Hybrid; GBP 60,000 - 100,000; Full time

Job summary

An innovative firm is seeking a highly skilled Security Engineer to join its dynamic IT Security team. This role involves ensuring the security and integrity of systems across multiple sectors, including Fintech and Health. The ideal candidate will have a strong background in networking and cloud security, with hands-on experience in leading security technologies. Responsibilities include designing network security architectures, managing SIEM solutions, and contributing to compliance with Cyber Essentials Plus and ISO 27001 standards. Join a forward-thinking company where your expertise will play a crucial role in safeguarding vital systems and data.

Qualifications

• Strong understanding of network protocols and security technologies.
• Experience with cloud security, especially in Azure environments.

Responsibilities

• Design and manage network security architectures including firewalls and VPNs.
• Conduct regular security assessments and incident response activities.

Skills

Networking Expertise

Cloud Security

Incident Response

Threat Hunting

Scripting (Python, PowerShell, Bash)

Cyber Essentials Plus

ISO 27001 Compliance

Education

CISSP

CISM

CISA

Azure Security Engineer Associate

Tools

Cisco Meraki

Microsoft Sentinel SIEM

Terraform

Azure Security Center

Palo Alto Networks

Job description

Social network you want to login/join with:

We are looking for a highly skilled and dynamic Security Engineer to join our IT Security team.My client works across multiple sectors to include, Fintech, Health & energy. The ideal candidate will have a strong background in networking, cloud security, and hands-on experience with leading security technologies. You will be responsible for ensuring the security and integrity of our systems, providing proactive threat detection and response, and supporting the implementation of security controls and policies across cloud, on-premise, and hybrid environments.

This role also involves working with SIEM solutions, automating security workflows, and contributing to the company's compliance with Cyber Essentials Plus and ISO 27001 standards.

Key Responsibilities:

• Design, implement, and manage network security architectures, including firewalls, VPNs, and other perimeter security technologies.
• Configure, deploy, and manage Cisco Meraki solutions for network security and monitoring.
• Implement and manage security controls in cloud environments, with expertise in Microsoft Azure security best practices.
• Work with Palo Alto Networks or Panorama solutions for enterprise-wide network security and threat management.
• Leverage Infrastructure as Code (IaC) principles using Terraform to automate security policies and infrastructure deployment.
• Utilize Security Information and Event Management (SIEM) solutions (preferably Microsoft Sentinel SIEM) to monitor, detect, and respond to security incidents.
• Create and maintain runbooks for security incident response, including automating workflows to improve incident response times.
• Lead threat hunting activities across on-premises and cloud environments to proactively identify potential security threats.
• Assist with Cyber Essentials Plus and ISO 27001 audits and certifications to ensure company-wide compliance with industry best practices and regulations.
• Collaborate with development teams to integrate security throughout the software development lifecycle (SDLC).
• Conduct regular security assessments, including vulnerability scans and penetration testing, to identify and mitigate risks.
• Stay up-to-date with the latest security trends, vulnerabilities, and emerging threats, and provide recommendations for improvements.

Required Skills & Experience:

• Networking Expertise:
• Strong understanding of network protocols, including TCP/IP, DNS, DHCP, and routing.
• Experience with firewalls, VPNs, IDS/IPS systems, and network traffic analysis.
• Deep experience securing cloud environments, especially Azure.
• Familiarity with cloud-native security tools, including Azure Security Center, and identity management solutions like Azure Active Directory.
• Hands-on experience configuring and managing Cisco Meraki firewalls, switches, and other networking/security appliances.
• Expertise with Palo Alto Networks firewalls, including configuration, management, and troubleshooting of security policies and threat management.
• Infrastructure as Code (IaC):
• Strong experience with Terraform for infrastructure automation, especially in security-related use cases (e.g., securing cloud infrastructure, managing security controls).
• SIEM Solutions:
• First-hand experience working with SIEM solutions, particularly Microsoft Sentinel SIEM.
• Experience in designing and managing SIEM rule sets, creating dashboards, and correlating data for threat detection.
• Familiarity with security event log analysis, alerts management, and incident response workflows.
• Cybersecurity Frameworks & Compliance:
• Knowledge of Cyber Essentials Plus and ISO 27001 compliance requirements.
• Ability to help maintain and audit compliance for ongoing security certifications.
• Demonstrated experience with proactive threat hunting and identifying vulnerabilities before they can be exploited.
• Strong skills in incident response and the development of runbooks and automated workflows to improve response efficiency.
• Automation & Scripting:
• Proficient in scripting languages such as Python, PowerShell, or Bash to automate tasks and security operations.

Preferred Qualifications / Not Essential:

• Certifications:
• CISSP (Certified Information Systems Security Professional)
• CISM (Certified Information Security Manager)
• CISA (Certified Information Systems Auditor)
• Azure certifications (e.g., Microsoft Certified: Azure Security Engineer Associate)
• Experience in securing hybrid and multi-cloud environments.

There is also a bonus on-top of the base salary which will be discussed on application.

This role is hybrid with 2 days a week on-site. Interview slots available now.