Cybersecurity engineer - #1163879

The Mission

You'll be the technical backbone of both our network infrastructure and security posture — designing resilient networks, architecting defences, hunting threats, and ensuring everything that connects us is also protected. This isn't a compliance checkbox role. You'll own real problems across two disciplines, work with a high-trust team, and see the direct impact of your work every day.

What You'll Do

Cybersecurity

• Lead threat modelling and vulnerability assessments across cloud and on-prem environments.

• Respond to and forensically investigate security incidents end-to-end.

• Harden CI/CD pipelines and enforce security-by-design across engineering teams.

• Translate complex risks into clear recommendations for technical and non-technical stakeholders.

• Stay current on threat intelligence — TTPs, CVEs, and emerging attack vectors.

Network Engineering

• Design, deploy, and manage LAN/WAN, SD-WAN, and hybrid cloud network architectures.

• Configure and maintain routers, switches, firewalls, and load balancers (Cisco, Juniper, Palo Alto, or equivalent).

• Implement and enforce zero-trust network access (ZTNA) and network segmentation policies.

• Monitor network performance, diagnose bottlenecks, and optimise throughput and uptime.

• Manage VPNs, VLANs, BGP/OSPF routing, and DNS/DHCP infrastructure.

• Collaborate with cloud teams to secure and govern network connectivity across AWS, GCP, or Azure environments.

What We're Looking For

• 4+ years in cybersecurity and/or network engineering

• Hands-on with cloud security and cloud networking (AWS, GCP, or Azure)

• Proficiency in Python, Bash, or PowerShell for automation

• Experience with OWASP, MITRE ATT&CK, or NIST frameworks

• Strong incident response and digital forensics experience

• Familiarity with SIEM, EDR, IDS/IPS, and SOAR platforms

• Solid grasp of TCP/IP, BGP, OSPF, MPLS, and VLANs

• Experience with firewalls, SD-WAN, and zero-trust network access

• Hands-on with Cisco, Juniper, Palo Alto, or Fortinet hardware/software

• Network monitoring tools (SolarWinds, PRTG, Wireshark, or similar)

• Certs a plus: CISSP, CEH, OSCP, CCNA, CCNP, or CompTIA Network+

• Clear communicator who can write a great post-mortem