About the role
The candidate will have responsibilities across the following functions:
Network Architecture Review:
- Review enterprise and cloud-connected network architecture for trust boundaries, exposure points, routing paths and control gaps.
- Validate segmentation and micro-segmentation designs across hybrid environments.
- Review ingress, egress, VPN, private connectivity and east-west traffic paths for least-privilege access.
- Partner with application and infrastructure teams to secure new network designs and change requests.
Perimeter Security Operations:
- Manage WAF, Bot Manager, DDoS protection, and client IP reputation controls.
- Define and maintain security policies for web, API and portal traffic to reduce abuse and malicious activity.
- Review public and private endpoint exposure for critical services, APIs, and admin interfaces.
External Penetration Testing:
- Monitor internet-facing assets, services and endpoints for exposure drift and unnecessary openings.
- Drive external network penetration testing and coordinate scheduling, scope and evidence collection.
- Track remediation actions and closure of findings with technology owners and security stakeholders.
- Validate fixes through retest where applicable and maintain status reporting.
Firewall and Network Policy Review:
- Review firewall rules, NSGs, security groups and related access controls.
- Optimise rules to remove unused access and align with business and risk requirements.
- Review routing and network path controls to confirm least privilege and separation of environments.
- Support exceptions, rule recertification and approval workflows for network security changes.
Security Hardening of Network Devices: Harden Network Devices:
- Define secure baseline configurations, administrative access controls and logging standards.
- Review hardening controls of network devices.
- Coordinate secure change management and rollback planning for network security platforms.
Security Reviews and Operational Governance:
- Partner with infrastructure, cloud, application and SOC teams on incidents, investigations and security issues.
- Produce review inputs, recommendations and remediation updates for stakeholders and management.
- Support audit evidence related to network security controls, reviews and remediation activities.
Requirements:
- 5+ years of hands-on experience in network security engineering or architecture.
- Strong understanding of the OSI model, routing, switching, VPNs, firewalls, WAF, DDoS and Bot Manager.
- Experience with network segmentation, micro-segmentation, network security groups and firewall policy review.
- Manage network security controls across cloud environments such as Azure and AWS.
- Experience performing external penetration testing and remediation tracking across technical teams.
- Strong communication and stakeholder management skills to influence secure design and remediation.