Networking & Security Engineer

We are seeking a hands-on Network & Security Engineer with deep expertise in Cisco networking, firewall management, and SD-WAN, combined with a strong security-first mindset. Networking and security are the core priorities of this role. The successful candidate will take a leading part in designing, maintaining, and strengthening the firm's network and security infrastructure in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI.

This is a technically demanding role that combines hands-on network engineering with proactive security ownership. The successful candidate will act as a security-first thinker across everything they touch (from day-to-day network operations through to strategic infrastructure design) and will be expected to drive meaningful improvements to the firm's network architecture and defensive capabilities.

This role is office-based and requires five days per week on-site presence.

Key Responsibilities

• Design, implement, and maintain the firm's network infrastructure, including Cisco routers, switches, firewalls, VPNs, and wireless systems, ensuring high availability, performance, and security at every layer.
• Own and manage the firm's SD-WAN architecture, including deployment, configuration, optimisation, and ongoing management of SD-WAN fabric across all sites.
• Manage and continuously improve firewall infrastructure, including rule-base management, policy design, segmentation, and regular firewall audits to ensure a tightly controlled network perimeter.
• Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end-to-end, with network traffic analysis as a core input.
• Monitor, triage, and respond to security events across the network and wider environment, including log analysis, anomaly detection, and threat hunting, with strong awareness of modern and AI-enabled attack vectors.
• Own and drive security hardening across network devices, servers, endpoints, and cloud-adjacent systems, ensuring consistent application of best practices and compliance with security policies.
• Design secure network architecture, embedding segmentation, access control, and security requirements from the outset rather than retrofitting them.
• Conduct regular network and vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner.
• Manage and continuously improve security tooling, including SIEM, EDR, IDS/IPS, and endpoint protection platforms, with particular focus on integration with network infrastructure.
• Act as the escalation point for network and security-related incidents across 2nd and 3rd line, providing expert guidance and driving resolution.