Network Security Engineer

MBDA S.A.S.; United States; Hybrid; USD 56,000 - 76,000; Full time

Benefits offered by this job

Company bonus

Pension

Overtime

Flexi leave

Enhanced parental leave

Discounts & vouchers

MyCar Scheme

Holiday purchase

Job summary

MBDA is seeking a Network Security Engineer to safeguard our network infrastructure within the 24x7 Internal Security Response team. You will design, implement and maintain robust security solutions, collaborate cross-functionally, and drive secure changes across the IT environment.

The role involves incident response, vulnerability management, and enhancing security tooling while aligning with industry best practices.

Qualifications

• Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS).
• Strong expertise in configuring, maintaining and troubleshooting firewalls (Cisco, Checkpoint, Palo Alto).
• Hands-on experience with next-gen firewalls and security features (IPS/IDS, SSL decryption, DPI).
• Experience with secure proxy solutions and content filtering policies (Blue Coat, F5).
• Knowledge of security protocols (IPSec, SSL/TLS, VPNs, 2FA).
• Understanding of DMZ and internal networks, and monitoring tools (PRTG, Nagios).
• Familiarity with cyber security tools integrations to networks.
• Ability to interpret packet captures to identify attacker behavior.
• Experience reviewing SOC alerts to triage Tier 1 SOC alerts.

Responsibilities

• Design, implement, and maintain network security solutions.
• Lead incident response and triage within the ISR team.
• Collaborate with cross-functional teams to implement secure changes.
• Identify vulnerabilities and remediate security gaps.
• Monitor and optimize network security tools and controls.
• Standardize network tools and security practices.
• Support SOC in alert triage and incident handling.

Skills

Networking basics

Firewall configuration

Next-gen firewalls

Proxy solutions

Security protocols

DMZ networks

Monitoring tools

SOC triage

LDAP

OSI model knowledge

Tools

Darktrace Antigena

Darktrace Respond

Splunk ES

LogRhythm

Blue Coat

F5 BIG-IP

Job description

Join our forward thinking team as a Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team. When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing and maintaining robust security solutions to protect against evolving threats. Collaborating with cross-functional teams, you will work on implementing changes securely, identifying vulnerabilities, managing security incidents and ensuring compliance with industry best practices. The role will be involved in the optimisation of network security tools to remediate "purple team" highlighted areas identified for improvement. You will also have the opportunity to immerse your time into the standardisation of network tools. This is a dynamic opportunity to contribute to security initiatives, solve complex challenges, and have a direct impact on the overall resilience of our IT environment. If you are passionate about security and proactive defence, this role is the perfect fit. If you are looking to leverage your technical skills in a values-led company that values innovation and diversity, this is the place to make an impact.

Employees receive 25 days of paid annual leave per calendar year, in addition to all statutory and public holidays. After 5, 10 and 15 years of service, an additional day of annual leave is added to your allowance at each of these milestones. You can also enjoy more time off by purchasing up to an additional five days holiday through payroll.

We trust our people to agree, within their teams, where and when they can be most effective. Our Dynamic Working policies allow individuals great levels of flexibility around the hours they work and where they work. Depending on your role and function, this may include options for paid overtime, dynamic leave (time in lieu) and more.

Our MBDA Retirement Savings Plan is a 'Defined Contribution' plan in the Mercer Master Trust. The standard contributions are 4% of an employee's base salary and 6% employer contributions. You can increase both employee and employer contributions by up to 2%. Financial Awareness - Employees have access to free financial webinars hosted throughout the year, along with access to a financial education website which provides plenty of useful hints, tips and guidance on managing financial wellness. Share Incentive Plan - Acquire shares in our UK Shareholder, BAE Systems PLC, the scheme is tax efficient on shares purchased. Mortgage Advice - As part of our financial wellbeing initiative employees can access free of charge mortgage advice and webinars. Season Ticket Loan - Employees can borrow the value of public transport season ticket for bus or train journeys to and from work and spread the cost over 12 months. Critical Illness - To help reduce the financial impact after being diagnosed with a critical illness, employees receive a tax-free lump sum payment that can be used for any purpose including covering medical expenses, adjustments to lifestyle and more.

Employee Assistance Programme - The Employee Assistance Programme is free, independent, confidential and is available 24 hours a day/365 days a year. Employees have access to short-term counselling (which includes up to 8 structured face to face, telephone or virtual sessions). Voluntary Private Medical Insurance - Private Medical Insurance offers three healthcare plans to suit your individual requirements for you and your family. Funded Private Medical Insurance - Eligible employees (Grade C & Above) are enrolled as standard into the company funded Private Medical Insurance benefit. Dental Insurance - The Dental Insurance benefit provides the option to claim cash back on everyday dental expenses such as, minor treatments, routine examinations, restorative treatment and more. There are six levels of cover available, with each level providing increased claim limits. Healthcare Cash Plan - The Healthcare Cash Plan benefit provides the option to claim cash back on everyday healthcare expenses such as optical, dental, health and wellbeing and more. There are six levels of cover available, with each level providing increased claim limits. Healthcare and Leisure - The Healthcare and Leisure benefit provides the option to claim cash back on everyday healthcare expenses such as medical fees, dentist fees, opticians and also provides access to special deals and concessions on sporting and recreational facilities.

After 5, 10 and 15 years of service, an additional day of annual leave is added to your allowance at each of these milestones. We trust our people to agree, within their teams, where and when they can be most effective. Our Dynamic Working policies allow individuals great levels of flexibility around the hours they work and where they work. Depending on your role and function, this may include options for paid overtime, dynamic leave (time in lieu) and more.

• Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS and load balancing)
• Strong expertise in configuring, maintaining and troubleshooting firewalls e.g. Cisco, Checkpoint, Palo Alto
• Demonstrable hands-on experience in next-gen firewalls and advancing security features like IPS/IDS, SSL decryption and deep packet inspection.
• Proven experience in managing secure proxy solutions (e.g. Bluecoat, F5) and the ability to implement policies for content filtering, SSL inspection and network traffic monitoring.
• In depth knowledge of security protocols such as IPSec, SSL / TLS, VPNs and two factor authentication.
• Understanding of network architectures and security zones (DMZ, internal networks).
• Proficient in monitoring technologies e.g. PRTG, Nagios.
• Understanding of cyber security capabilities and their integrations to networks infrastructure.
• Existing knowledge of / aptitude to learn Darktrace Antigena and Respond, Splunk ES or Log Rhythm tools.
• Strong ability to interpret complex information via use of packet capture in order to identify malicious traffic in detail, revealing attacker behaviours like C2, exploitation, lateral movement, or data exfiltration.
• Proven ability to review SOC alerting in collaboration with SOC analysts to effectively triage and manage Tier 1 SOC alerts to the appropriate outcome.
• Experience with LDAP, and application traffic flow root cause analysis.
• Previous experience to identify root cause from (TBC for review - Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S. Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools).

MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom.

We are proud of our employee-led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more. We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process.

Healthworks Gym Membership - The Healthworks on-site gym at our Stevenage site offers a range of facilities and equipment, alongside a variety of classes available during the week. Annual Gym Membership - Take advantage of discounted membership at over 3,600 of the UK's leading gym chains, leisure centres, hotel health clubs, independent gyms, boot camps and yoga studios. The Club -The Club provides a fantastic opportunity to enjoy great social activities - from theatre trips, days out, to sporting activities.

We're proud to be a nationally recognised employer at MBDA. We have received a range of employer awards including Glassdoor Best Places to Work 2022; Gold awards from Investors in People, the 5% Club, and Armed Forces Covenant. We are also currently ranked #1 in the UK's Best Big Companies to Work For 2022 league table, as well as #1 for Manufacturing.

Salary: Circa £50,000 depending on experience + shift allowance

Dynamic (hybrid) working: 5 days per week on-site due to workload classification, working a 24/7 Shift Pattern

Security Clearance: British Citizen. This role will require DV Clearance. Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS) and a Security Check (SC) clearance, which are managed by the MBDA Personnel Security Team.

What we can offer you:

• Company bonus: Up to £2,500 (based on company performance and will vary year to year)
• Pension: maximum total (employer and employee) contribution of up to 14%
• Overtime: opportunity for paid overtime
• Flexi Leave: Up to 15 additional days
• Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments
• Facilities: Fantastic site facilities including subsidised meals, free car parking and much more… We recognise that having or adopting a child is a significant life event for our employees and as a family friendly employer we offer a range of enhanced family leave provisions to support employees before, during and after a period of leave.

Our enhanced parental leave offers up to 26 weeks for maternity, adoption and shared parental leave. Enhancements are available for paternity leave, neonatal leave and fertility testing and treatments. We also offer 2 weeks enhanced pay for paternity leave, and neonatal care leave for up to 12 weeks where a period of extended hospital care is required after birth. Employees also have access to support whilst undergoing fertility testing and treatments.

Lifestyle - Discounts & Vouchers. Lifestyle - Discounts & Vouchers. Discounts - The Discounts platform includes a great range of features such as: discounts, instant vouchers, reloadable cards, easy saver cards, cashback, mobile app and Wellbeing Centre. Costco - Permanent employees of MBDA qualify for Costco's individual membership. Technology Vouchers - Purchase the latest gadgets and white goods up to the value of £2,500 and spread the cost over 12 months. Charity Donations - Donate up to five charities each month, with full tax relief on all donations. MyCar Scheme - The MBDA MyCar Scheme offers employees the opportunity to access up to two new vehicles via a salary sacrifice arrangement including an all-inclusive package. Holiday Purchase - Purchase up to 5 days' extra holiday whilst making tax and National Insurance savings, spreading the cost over 12 months.

Development of our people is of vital importance to us at MBDA, which is why we ensure everyone has access to the teams, tools and resources needed to achieve their goals. This includes our dedicated in-house Learning & Development team, our Apprenticeship programmes, a variety of online learning platforms, and much more. We encourage new learning and will provide up to £150 in financial support per year if you wish to participate in further study in your own time. If you lead a team, or hope to do so in the future, we offer a range of management training opportunities, with paths designed for people of all experience levels.

Dynamic Working We want our people to work when and where they feel they can be most effective. For most of our employees, we have a flexi-time scheme that allows you to choose, within certain parameters, when you start and finish each day and how you can use time you have accrued. For roles that do not have to be based on one of our sites full-time, you will have opportunities to work from home as part of your agreed Dynamic Working arrangement. If you have worked the time, you are also able to accrue and take up to 15 days of Flexi-leave per annum, in addition to the 25 days of annual leave provided and bank holidays.

Security Clearance All employees at MBDA are required to hold UK Security or BPSS Clearance.