Network Security Specialist

Liberty Global; Netherlands; On-site; EUR 90,000 - 150,000; Full time

Benefits offered by this job

25 days annual leave + 5 optional

Company Pension Contributions

LinkedIn Learning & Coursera access

Laptop and mobile provided

Public transport subsidy

Job summary

Liberty Global is seeking a senior Network Security Expert in the Netherlands to protect its tier-1 core network and lead security monitoring. You will work with global security teams, architects, and operations to enhance network hygiene, detect and mitigate threats, and translate findings into actionable risk decisions.

The role requires deep expertise in ISP networks, BGP security, and incident response.

Qualifications

• Solid grasp of Networking, Security and Monitoring.
• Experience securing and protecting large ISP networks.
• Familiarity with BGP, RPKI, DoS mitigation and DNS/DNSSEC.

Responsibilities

• Identify and drive improvements on Network Security for Liberty Global's tier-1 core network.
• Advise ISP networks to implement security measures and monitoring.
• Review and generate technical specifications/documentation.
• Translate monitoring use cases to incident response playbooks.
• Mentor engineers and act as escalation point.
• Monitor and respond to security incidents.

Skills

Networking

Security

Monitoring

ISP network security

Communication

Education

RIPE NCC certification (Database/BGP security)

Tools

Arbor threat mitigation suite

Splunk

Grafana

Elastic Stack

Job description

ABOUT US

We're building Tomorrow's Connections Today, bringing people together through the power of our technology.

Liberty Global is a world leader in converged broadband, video and mobile communications and an active investor in cutting-edge infrastructure, content and technology ventures.

With our investments in fibre-based and 5G networks we play a vital role in society, currently providing over 85 million fixed and mobile connections and rolling out the next generation of products and services, while readying our networks for 10 Gbps and beyond.

We're creating national champions, combining the best broadband and mobile networks under brands such as Virgin Media-02 in the UK, VodafoneZiggo in The Netherlands, Telenet in Belgium, Sunrise in Switzerland, Virgin Media in Ireland and UPC in Slovakia.

Liberty Global Ventures, our global investment arm, has a portfolio of more than 75 companies and funds across content, technology and infrastructure, including strategic stakes in ITV, Univision, Plume, Lionsgate and the Formula E racing series.

Our scale enables us to transfer knowledge and expertise across our operations and investments, creating a dynamic family of brands united in the pursuit of innovation and excellence.

And we're prioritising diversity, equity and inclusion in our workplace and communities, while reducing our impact on the environment. We are using technology as a force for good; for our people, our partners and the planet.

JOB PURPOSE

You will assure that our core and global tier-1 network has sound and industry best practice security protection and that the security of these products are monitored.

The role will work closely together with Liberty Global core network architects, engineering and operational and global security teams to identify improvements and drive Network Hygiene security improvements and provide specialized skills in case of investigations.

The role includes the ability to translate security findings or deficiencies to security risks and advise the organization on blocking issues and acceptable risk.

• Identify and drive improvements on Network Security on the tier-1 core network of Liberty Global.
• Identify and advise our ISP networks to implement similar security measures and monitoring.
• Review and generate technical specifications/documentation
• Translate, create, and hand over network monitoring use cases and tread play books to incident response teams
• Act as a mentor, technical lead and escalation point for other engineers
• Monitor and respond to incidents

KEY ACCOUNTABILITIES

• Serve as an authority on Internet security related questions on topics like Network Hygiene, MANRS, DDoS mitigation, BGP routing and traffic analysis.
• Trace and identify sources of BGP hijacks, BGP leaks, DDoS, malware or other abuse traffic
• Review and update/improve security requirements set in policies/guidelines and make sure that these are following industry best practice.
• Identify potential areas of improvement and drive implementation.
• Liaise with the Global Security Operations Centre, LG and external operational teams and other Business units to have the right priorities set for maximum effect.
• Work with and understand deliverables of external bodies like M3AAWG, CableLabs, RIPE, and other security and standards organizations to assure Liberty Global networks and services follow industry Best Practice regarding Security areas.

We tend to look for people with:

• Solid grasp of Networking, Security and Monitoring
• Experience and expertise in securing and protecting large (ISP) networks.
• Familiarity with network hygiene measures such as BCP38/84 anti-spoofing protection, RPKI, and other BGP routing BCPs, RIRs, and Internet Routing Registries, DNS/DNSSEC, and domain registration.
• Strong grasp of network security vulnerabilities and protections like: Denial of Service attacks and mitigation, BGP Hijacking, CoPP, access-lists, Tacacs, Spam/malware/abuse.
• Experience in presenting findings and making recommendations to other operational teams.
• Experience in working with many collaborators to improve security and incident response both internal and external in an international community.
• Demonstrated ability in an ISP environment and Internet security arena.
• Experience with Internet organizations like RIR's and domain name registries and tools like whois/RDAP, RIPE RIS, BGP and DNS monitoring. RIPE NCC certification (Database/BGP security) is a plus.
• Solid understanding of network security, security monitoring, and layers of defense principles.

SKILLS & ABILITIES:

• Fluency in English (speaking/writing)
• Superb communication skills

Extensive knowledge or interest of at least 4 of the following areas:

• Networking, TCP/IP, IPv4/IPv6 and main services used by applications
• BGP, RPKI, Control Plane Policing (CoPP), DNS/DNSSEC
• Protection against DOS attacks, amplification factors and mitigation techniques
• Security analytics capabilities
• Experience with monitoring and analytics solutions (e.g. Arbor threat mitigation suite, Splunk, Grafana, Elastic Stack etc...)
• Basic scripting/programming/database skills.
• A great teammate, able to prioritise effectively and work independently well under pressure.
• Working with internal / external working groups to support improving network security and reduce impact of Denial of Service attack factors or other service disruptive activities in our footprint.

Some of the benefits we offer:

• Competitive salary + Bonus
• 25 days annual leave with the option to purchase 5 more
• Free access to LinkedIn Learning & Coursera to continue to develop and grow your career with us
• Company Pension Contributions
• Free premium subscription to Calm - a renowned well-being & meditation app (NL only)
• Free public transport subscription that can be used for both work and leisure travel on all modes of public transport, anywhere in the Netherlands
• Subsidy on health insurance premium
• Company Laptop, Mobile and Phone Subscription

Liberty Global is an equal opportunity employer. We embrace diversity and are committed to creating an inclusive environment for our people. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process.We're 100% committed to having a workforce that represents every part of our society. So we're keen to hear from candidates of all background and circumstances.