Network Security Engineer (SOC)

MBDA; Stevenage; On-site; GBP 48,000 - 55,000; Full time

Benefits offered by this job

Annual bonus

Pension up to 14%

Overtime paid

Flexi Leave

Parental leave enhancements

Site facilities

Job summary

MBDA is recruiting a Network Security Engineer to safeguard our network infrastructure as part of the 24x7 Internal Security Response team. You will design and implement robust security controls, respond to incidents and collaborate with cross-functional teams.

The role involves configuring next‑gen firewalls, managing secure proxies and monitoring tooling, with a hybrid on-site pattern due to workload. A DV clearance path and BPSS/SC checks apply.

Qualifications

• Solid understanding of networking principles (TCP/IP, DNS, routing, switching).
• Experience configuring, maintaining and troubleshooting firewalls (Cisco, Check Point, Palo Alto).
• Hands-on with next-gen firewalls and security features (IPS/IDS, SSL decryption, DPI).
• Experience managing secure proxy solutions and content filtering policies.
• Knowledge of IPSec, SSL/TLS, VPNs and two-factor authentication.
• Understanding of DMZs, internal networks and security zones.
• Monitoring with tools like PRTG, Nagios.

Responsibilities

• Design, implement and maintain robust security solutions for 24x7 ISR team.
• Lead incident response, triage and collaboration with SOC analysts.
• Improve security tooling and standardise network tools across teams.

Skills

Networking principles

Firewall configuration

Next-gen firewall

Proxy solutions

Security protocols

Network architectures

Monitoring tools

Tools

Cisco Firewalls

Check Point

Palo Alto

Job description

An exciting opportunity for a passionate Network Security Engineer to join a unique, multi-national Information Management function. Ideal candidates should be committed to protecting our critical systems and ensuring the integrity and security of our network infrastructure.

Salary: Circa £50,000depending on experience + shift allowance

Dynamic (hybrid) working: 5 days per week on-site due to workload classification, working a 24/7 Shift Pattern

Security Clearance: British Citizen

This role will require DV Clearance. Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS) and a Security Check (SC) clearance, which are managed by the MBDA Personnel Security Team.

What we can offer you:

• Company bonus: Up to £2,500 (based on company performance and will vary year to year)
• Pension: maximum total (employer and employee) contribution of up to 14%
• Overtime: opportunity for paid overtime
• Flexi Leave: Up to 15 additional days
• Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments
• Facilities: Fantastic site facilities including subsidised meals, free car parking and much more…

The opportunity:

Join our forward thinking team as a Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team.

When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing and maintaining robust security solutions to protect against evolving threats. Collaborating with cross-functional teams, you will work on implementing changes securely, identifying vulnerabilities, managing security incidents and ensuring compliance with industry best practices.

The role will be involved in the optimisation of network security tools to remediate "purple team" highlighted areas identified for improvement. You will also have the opportunity to immerse your time into the standardisation of network tools.

This is a dynamic opportunity to contribute to security initiatives, solve complex challenges, and have a direct impact on the overall resilience of our IT environment.

If you are passionate about security and proactive defence, this role is the perfect fit.

If you are looking to leverage your technical skills in a values-led company that values innovation and diversity, this is the place to make an impact.

What we're looking for from you:

Essentials

• Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS and load balancing)
• Strong expertise in configuring, maintaining and troubleshooting firewalls e.g. Cisco, Checkpoint, Palo Alto
• Demonstrable hands‑on experience in next‑gen firewalls and advancing security features like IPS/IDS, SSL decryption and deep packet inspection.
• Proven experience in managing secure proxy solutions (e.g. Bluecoat, F5) and the ability to implement policies for content filtering, SSL inspection and network traffic monitoring.
• In depth knowledge of security protocols such as IPSec, SSL / TLS, VPNs and two factor authentication.
• Understanding of network architectures and security zones (DMZ, internal networks).
• Proficient in monitoring technologies e.g. PRTG, Nagios.

DESIRABLES

• Understanding of cyber security capabilities and their integrations to networks infrastructure.
• Existing knowledge of / aptitude to learn Darktrace Antigena and Respond, Splunk ES or Log Rhythm tools.
• Strong ability to interpret complex information via use of packet capture in order to identify malicious traffic in detail, revealing attacker behaviours like C2, exploitation, lateral movement, or data exfiltration.
• Proven ability to review SOC alerting in collaboration with SOC analysts to effectively triage and manage Tier 1 SOC alerts to the appropriate outcome.
• Experience with LDAP, and application traffic flow root cause analysis.
• Previous experience to identify root cause from (TBC for review - Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S. Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools).

Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given

MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom.

We are proud of our employee‑led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more…

We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process.

Follow us on LinkedIn (MBDA), X (@MBDA_UK), Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.