Senior Cyber Security Network Engineer

Description

The team builds products and services across broadband, broadcast, streaming and mobile, and the company is a leading media and entertainment business that connects millions of people with entertainment, sports, news and arts.

This senior role covers the security strategy that protects the company's data, systems and networks. You will watch network activity, spot threats, respond to incidents, keep the company compliant with applicable laws and regulations, advise on cyber security best practice, and write information security policies and procedures.

Responsibilities

• Build cyber security plans that deal with today's threats and anticipate future ones.
• Watch network traffic for suspicious activity and unauthorised access attempts.
• Look into possible breaches of system integrity and other anomalies that monitoring picks up.
• Act fast on incidents, for example by isolating affected systems from the network or restoring backups where needed.
• Review current information security processes and procedures to find gaps and ways to reduce risk.
• Deploy new security technology, such as firewalls, intrusion detection systems (IDS) and encryption tools, to better defend against attacks, intrusions and breaches.
• Write detailed reports on cyber security activity, covering incident response actions and recommended fixes or mitigations.
• Advise on cyber security matters for colleagues and for customers and partners.
• Track developments in cyber security technology, trends and industry standards, and keep the company's practices in line with them.

Requirements

• Have a track record of designing, building, securing and supporting large enterprise network security systems, including firewalls (Palo Alto, Check Point, Fortinet, Cisco), WAFs such as Akamai, load balancers (F5, Citrix ADC), VPNs, NAC solutions, routers and switches in complex environments.
• Manage network access control, set authentication and authorisation rules for workstations and corporate devices, update endpoint posture policies, manage guest access, and investigate connectivity and access incidents.
• Know networking and infrastructure security well: TCP/IP, routing and switching, DNS, DHCP, NTP, VLANs, segmentation, NAT, proxies, packet analysis and troubleshooting, plus hardening Windows, Linux and network devices and fixing vulnerabilities.
• Have hands-on work with security operations, including monitoring, logging, alerting, threat detection, incident investigation, EDR, anti-malware and antivirus platforms, vulnerability management, encryption, cryptographic controls and threat intelligence tools.
• Automate and improve security operations with scripting and infrastructure automation, such as Python, PowerShell, shell scripting, Terraform, Ansible or similar tools.
• Have a record of solving complex network and security incidents in large enterprise settings, including live operational incidents, security transformation work, SIEM and SOAR platforms, cloud networking and security on AWS, Azure or GCP, and Zero Trust architectures.
• Communicate clearly, write strong technical documents such as designs, standards, runbooks and procedures, manage stakeholders, and work well across teams. Hold relevant industry certifications such as CISSP, OSCP, GIAC/SANS, CCNP Security or CCIE Security, or an equivalent.
• Desirable: experience with cloud networking and security on AWS, Azure or GCP.
• Desirable: experience with Infrastructure as Code, such as Terraform or Ansible.
• Desirable: knowledge of Zero Trust architectures.
• Desirable: experience with SIEM and SOAR platforms.
• Desirable: experience supporting large security transformation programmes.

Conditions

This is a hybrid role with 2 days per week in the office.

The office base is Osterley, the company's headquarters, a 10-minute walk from Syon Lane train station, with free shuttle buses from Osterley, Gunnersbury and Ealing Broadway stations and free onsite parking for cars, motorbikes and bicycles.

The site has 13 cafes and restaurants at subsidised prices, a gym, a cinema, a car wash and a beauty salon.

You must have the right to work in the UK. The company does not offer sponsorship for this position.

If your application succeeds, you will be asked to complete a criminal record check, and the offer may be withdrawn depending on the role and the nature of any convictions.

The company is an equal opportunity employer, a Disability Confident Accredited Employer, and will make reasonable adjustments where appropriate if you flag them early.

Benefits

• A free TV package from the company, including sports and cinema channels.
• A pension with up to 9% employer contribution.
• Private healthcare that includes mental health support.
• Aviva Digital GP and dental insurance.
• Discounts on the company's mobile, broadband, glass and protection products.
• Sharesave and Tech schemes.
• A range of VIP rewards and experiences.