About the role
You’ll protect our clients’ networks, endpoints and infrastructure: the firewalls, VPNs, identity systems and monitoring that keep attackers out and catch them when they get in. You’ll work across several client environments, or embedded with one client’s IT and security team.
What you’ll do
- Design, configure and review firewalls, network segmentation, VPN and zero-trust access, and remote access controls.
- Operate and tune IDS/IPS, WAF and DDoS protection, and keep rule sets current.
- Run and tune SIEM or XDR and EDR platforms, and write detection rules that catch real attacks without flooding analysts.
- Handle security incidents from triage to post-incident review, and act as escalation point for a client’s managed SOC where there is one.
- Harden servers, endpoints and directory services (Active Directory or Entra ID) against CIS Benchmarks.
- Run vulnerability scanning across networks and hosts, and follow fixes through to closure.
- Implement and evidence technical controls for ISO 27001, SOC 2, PCI DSS, NIS2 or NIST CSF.
- Set network and infrastructure security baselines, review other engineers’ configurations, and maintain network diagrams, runbooks, playbooks and incident reports.
What you bring
What you bring
Good command of English ( equivalent to IELTS 6.5 & above) is must requirement
7+ years in network security, infrastructure security or security operations, including at least 3 years at senior level.
Strong networking fundamentals: TCP/IP, routing, VLANs, DNS, HTTP/S, IPsec and SSL VPN.
Hands-on experience with at least one major firewall platform, such as Palo Alto, Fortinet, Check Point or Cisco.
Operating a SIEM or XDR and an EDR platform, including writing and tuning detection rules.
Identity and access: Active Directory or Entra ID, MFA, conditional access and privileged access management.
Vulnerability scanning with tools such as Nessus, Qualys, Rapid7 or OpenVAS.
Linux and Windows Server hardening.
Incident response across the full lifecycle: triage, containment, eradication, recovery and root-cause analysis.
Packet and log analysis with tools such as Wireshark or tcpdump.
Nice to have
CCNP Security, PCNSE, NSE 4 or higher, Security+, CySA+, GCIH or CISSP.
Microsoft Sentinel and Defender, CrowdStrike, Splunk, Elastic or Wazuh.
Cloudflare or a similar edge platform.
Cloud networking on AWS, Azure or GCP.
Scripting in Python or PowerShell to automate checks and responses.
