Network Security Specialist

Liberty Global; Greater London; On-site; GBP 85,000 - 120,000; Full time

Benefits offered by this job

Competitive salary + Bonus

25 days annual leave

LinkedIn Learning & Coursera

Company Pension Contributions

Calm – wellness app (NL only)

Free public transport subscription

Health insurance premium subsidy

Company Laptop, Mobile and Phone Sub

Job summary

Liberty Global is seeking a Network Security Architect to protect our core and global tier-1 networks, ensuring sound security practices across the footprint. You will collaborate with core network architects, engineering and security teams to identify improvements, drive Network Hygiene initiatives and translate findings into actionable risk guidance for the organisation.

The role requires strong knowledge of BGP, DDoS mitigation, monitoring and experience working with international partners

Qualifications

• Solid grasp of Networking, Security and Monitoring.
• Experience securing large (ISP) networks.
• Familiarity with network hygiene measures (BCP38/84, RPKI, BGP/BCPs).
• Knowledge of DoS mitigation, BGP hijacking, CoPP, access-lists, Tacacs, spam/malware/abuse.

Responsibilities

• Serve as an authority on Internet security questions (Network Hygiene, MANRS, DDoS mitigation, BGP routing).
• Trace sources of BGP hijacks/leaks, DDoS, malware, or abuse traffic.
• Review and improve security requirements in policies/guidelines to align with best practices.
• Identify improvements and drive implementation across teams.
• Liaise with Global Security Operations Centre and external organisations to prioritise work.
• Engage with groups like RIPE, CableLabs, RIPE NCC to ensure best-practice security.

Skills

English fluency

Communication

Networking

Security

Monitoring

ISP security

BGP security

Job description

About Us

We’re building Tomorrow’s Connections Today, bringing people together through the power of our technology.

About Us

We’re building Tomorrow’s Connections Today, bringing people together through the power of our technology.
Liberty Global is a world leader in converged broadband, video and mobile communications and an active investor in cutting-edge infrastructure, content and technology ventures.
With our investments in fibre-based and 5G networks we play a vital role in society, currently providing over 85 million fixed and mobile connections and rolling out the next generation of products and services, while readying our networks for 10 Gbps and beyond.
We’re creating national champions, combining the best broadband and mobile networks under brands such as Virgin Media-02 in the UK, VodafoneZiggo in The Netherlands, Telenet in Belgium, Sunrise in Switzerland, Virgin Media in Ireland and UPC in Slovakia.
Liberty Global Ventures, our global investment arm, has a portfolio of more than 75 companies and funds across content, technology and infrastructure, including strategic stakes in ITV, Univision, Plume, Lionsgate and the Formula E racing series.
Our scale enables us to transfer knowledge and expertise across our operations and investments, creating a dynamic family of brands united in the pursuit of innovation and excellence.
And we’re prioritising diversity, equity and inclusion in our workplace and communities, while reducing our impact on the environment. We are using technology as a force for good; for our people, our partners and the planet.

Job Purpose

You will assure that our core and global tier-1 network has sound and industry best practice security protection and that the security of these products are monitored.
The role will work closely together with Liberty Global core network architects, engineering and operational and global security teams to identify improvements and drive Network Hygiene security improvements and provide specialized skills in case of investigations.
The role includes the ability to translate security findings or deficiencies to security risks and advise the organization on blocking issues and acceptable risk.

Key Accountabilities

• Serve as an authority on Internet security related questions on topics like Network Hygiene, MANRS, DDoS mitigation, BGP routing and traffic analysis.
• Trace and identify sources of BGP hijacks, BGP leaks, DDoS, malware or other abuse traffic
• Review and update/improve security requirements set in policies/guidelines and make sure that these are following industry best practice.
• Identify potential areas of improvement and drive implementation.
• Liaise with the Global Security Operations Centre, LG and external operational teams and other Business units to have the right priorities set for maximum effect.
• Work with and understand deliverables of external bodies like M3AAWG, CableLabs, RIPE, and other security and standards organizations to assure Liberty Global networks and services follow industry Best Practice regarding Security areas.

We Tend To Look For People With

• Solid grasp of Networking, Security and Monitoring
• Experience and expertise in securing and protecting large (ISP) networks.
• Familiarity with network hygiene measures such as BCP38/84 anti-spoofing protection, RPKI, and other BGP routing BCPs, RIRs, and Internet Routing Registries, DNS/DNSSEC, and domain registration.
• Strong grasp of network security vulnerabilities and protections like: Denial of Service attacks and mitigation, BGP Hijacking, CoPP, access-lists, Tacacs, Spam/malware/abuse.
• Experience in presenting findings and making recommendations to other operational teams.
• Experience in working with many collaborators to improve security and incident response both internal and external in an international community.
• Demonstrated ability in an ISP environment and Internet security arena.
• Experience with Internet organizations like RIR's and domain name registries and tools like whois/RDAP, RIPE RIS, BGP and DNS monitoring. RIPE NCC certification (Database/BGP security) is a plus.
• Solid understanding of network security, security monitoring, and layers of defense principles.

Skills & Abilities

• Fluency in English (speaking/writing)
• Superb communication skills

Extensive knowledge or interest of at least 4 of the following areas:

• Networking, TCP/IP, IPv4/IPv6 and main services used by applications
• BGP, RPKI, Control Plane Policing (CoPP), DNS/DNSSEC
• Protection against DOS attacks, amplification factors and mitigation techniques
• Security analytics capabilities
• Experience with monitoring and analytics solutions (e.g. Arbor threat mitigation suite, Splunk, Grafana, Elastic Stack etc…)
• Basic scripting/programming/database skills.
• A great teammate, able to prioritise effectively and work independently well under pressure.
• Working with internal / external working groups to support improving network security and reduce impact of Denial of Service attack factors or other service disruptive activities in our footprint.

Some Of The Benefits We Offer

• Competitive salary + Bonus
• 25 days annual leave with the option to purchase 5 more
• Free access to LinkedIn Learning & Coursera to continue to develop and grow your career with us
• Company Pension Contributions
• Free premium subscription to Calm – a renowned well-being & meditation app (NL only)
• Free public transport subscription that can be used for both work and leisure travel on all modes of public transport, anywhere in the Netherlands
• Subsidy on health insurance premium
• Company Laptop, Mobile and Phone Subscription

Liberty Global is an equal opportunity employer. We embrace diversity and are committed to creating an inclusive environment for our people. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process. We’re 100% committed to having a workforce that represents every part of our society. So we’re keen to hear from candidates of all background and circumstances.