Network Security Engineer (SOC)

MBDA UK Ltd; Stevenage; On-site; GBP 48,000 - 55,000; Full time

Benefits offered by this job

Company bonus

Pension (up to 14%)

Overtime opportunity

Flexi Leave (up to 15 days)

Enhanced parental leave (up to 26 wks)

Job summary

MBDA UK Ltd is seeking a Network Security Engineer to join the 24x7 Internal Security Response team. You will design, implement and maintain security solutions protecting the organisation's network infrastructure and incident response capabilities.

The role involves collaborating with SOC and cross-functional teams to remediate threats, identify vulnerabilities and ensure secure change processes. The position requires a DV clearance and British citizenship, with a dynamic hybrid working

Qualifications

• Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS and load balancing)
• Strong expertise in configuring, maintaining and troubleshooting firewalls e.g. Cisco, Checkpoint, Palo Alto
• Hands-on experience in next-gen firewalls and security features like IPS/IDS, SSL decryption and deep packet inspection
• Experience managing secure proxy solutions (e.g. Bluecoat, F5) and policy implementation for content filtering, SSL inspection and monitoring
• Knowledge of security protocols such as IPSec, SSL/TLS, VPNs and two-factor authentication
• Understanding of network architectures and security zones (DMZ, internal networks)
• Proficiency with monitoring tools e.g. PRTG, Nagios

Responsibilities

• Design, implement and maintain robust security solutions for network protection
• Lead incident response and triage activities with the SOC team
• Remediate vulnerabilities and ensure compliance with industry best practices
• Optimize network security tools and standardize tool usage across the estate
• Collaborate with cross-functional teams to implement changes securely and efficiently

Skills

Networking principles

Firewall configuration

Next-gen firewalls

Secure proxy policies

Security protocols

Network architectures

Monitoring technologies

Tools

Cisco firewalls

Checkpoint firewalls

Palo Alto firewalls

Blue Coat proxy

F5 BIG-IP

PRTG

Nagios

Packet capture tools

Job description

An exciting opportunity for a passionate Network Security Engineer to join a unique, multi-national Information Management function. Ideal candidates should be committed to protecting our critical systems and ensuring the integrity and security of our network infrastructure.

Salary

Circa £50,000depending on experience + shift allowance

Dynamic (hybrid) working

5 days per week on-site due to workload classification, working a 24/7 Shift Pattern

Security Clearance

British Citizen

This role will require DV Clearance. Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS) and a Security Check (SC) clearance, which are managed by the MBDA Personnel Security Team.

What we can offer you

• Company bonus: Up to £2,500 (based on company performance and will vary year to year)
• Pension: maximum total (employer and employee) contribution of up to 14%
• Overtime: opportunity for paid overtime
• Flexi Leave: Up to 15 additional days
• Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments
• Facilities: Fantastic site facilities including subsidised meals, free car parking and much more...

The opportunity

Join our forward thinking team as a Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team.

When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing and maintaining robust security solutions to protect against evolving threats. Collaborating with cross-functional teams, you will work on implementing changes securely, identifying vulnerabilities, managing security incidents and ensuring compliance with industry best practices.

The role will be involved in the optimisation of network security tools to remediate "purple team" highlighted areas identified for improvement. You will also have the opportunity to immerse your time into the standardisation of network tools.

This is a dynamic opportunity to contribute to security initiatives, solve complex challenges, and have a direct impact on the overall resilience of our IT environment.

If you are passionate about security and proactive defence, this role is the perfect fit.

If you are looking to leverage your technical skills in a values-led company that values innovation and diversity, this is the place to make an impact.

What we're looking for from you

ESSENTIALS

• Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS and load balancing)
• Strong expertise in configuring, maintaining and troubleshooting firewalls e.g. Cisco, Checkpoint, Palo Alto
• Demonstrable hands‑on experience in next‑gen firewalls and advancing security features like IPS/IDS, SSL decryption and deep packet inspection.
• Proven experience in managing secure proxy solutions (e.g. Bluecoat, F5) and the ability to implement policies for content filtering, SSL inspection and network traffic monitoring.
• In depth knowledge of security protocols such as IPSec, SSL / TLS, VPNs and two factor authentication.
• Understanding of network architectures and security zones (DMZ, internal networks).
• Proficient in monitoring technologies e.g. PRTG, Nagios.

DESIRABLES

• Understanding of cyber security capabilities and their integrations to networks infrastructure.
• Existing knowledge of / aptitude to learn Darktrace Antigena and Respond, Splunk ES or Log Rhythm tools.
• Strong ability to interpret complex information via use of packet capture in order to identify malicious traffic in detail, revealing attacker behaviours like C2, exploitation, lateral movement, or data exfiltration.
• Proven ability to review SOC alerting in collaboration with SOC analysts to effectively triage and manage Tier 1 SOC alerts to the appropriate outcome.
• Experience with LDAP, and application traffic flow root cause analysis.
• Previous experience to identify root cause from (TBC for review - Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S. Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools).

Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given

MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom.

We are proud of our employee‑led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more...

We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process.

Follow us on LinkedIn (MBDA), X (@MBDA_UK), Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.

#LI-RM1