Senior Security Engineer

The candidate will have responsibilities across the following functions:

Network Architecture Review:

• Review enterprise and cloud-connected network architecture for trust boundaries, exposure points, routing paths and control gaps.
• Validate segmentation and micro-segmentation designs across hybrid environments.
• Review ingress, egress, VPN, private connectivity and east-west traffic paths for least-privilege access.
• Partner with application and infrastructure teams to secure new network designs and change requests.

Perimeter Security Operations:

• Manage WAF, Bot Manager, DDoS protection, and client IP reputation controls.
• Define and maintain security policies for web, API and portal traffic to reduce abuse and malicious activity.
• Review public and private endpoint exposure for critical services, APIs, and admin interfaces.

External Penetration Testing:

• Monitor internet-facing assets, services and endpoints for exposure drift and unnecessary openings.
• Drive external network penetration testing and coordinate scheduling, scope and evidence collection.
• Track remediation actions and closure of findings with technology owners and security stakeholders.
• Validate fixes through retest where applicable and maintain status reporting.

Firewall and Network Policy Review:

• Review firewall rules, NSGs, security groups and related access controls.
• Optimise rules to remove unused access and align with business and risk requirements.
• Review routing and network path controls to confirm least privilege and separation of environments.
• Support exceptions, rule recertification and approval workflows for network security changes.

Security Hardening of Network Devices: Harden Network Devices:

• Define secure baseline configurations, administrative access controls and logging standards.
• Review hardening controls of network devices.
• Coordinate secure change management and rollback planning for network security platforms.

Security Reviews and Operational Governance:

• Partner with infrastructure, cloud, application and SOC teams on incidents, investigations and security issues.
• Produce review inputs, recommendations and remediation updates for stakeholders and management.
• Support audit evidence related to network security controls, reviews and remediation activities.

Requirements:

• 5+ years of hands-on experience in network security engineering or architecture.
• Strong understanding of the OSI model, routing, switching, VPNs, firewalls, WAF, DDoS and Bot Manager.
• Experience with network segmentation, micro-segmentation, network security groups and firewall policy review.
• Manage network security controls across cloud environments such as Azure and AWS.
• Experience performing external penetration testing and remediation tracking across technical teams.
• Strong communication and stakeholder management skills to influence secure design and remediation.