Senior Network & Security Engineer

Quick Facts

• Develop and secure multi-site networks and technical security controls
• Focus areas: LAN/WLAN/WAN, firewall/VPN, vulnerability management, Microsoft endpoint security, EDR/XDR, SIEM, incident response
• Work mode: hybrid

Description

You will be responsible for developing network security and implementing technical safeguards across company labs and offices. The role requires an experienced engineer who can translate identified risks into concrete controls, deploy them, and verify their effectiveness through testing.

Responsibilities

• Administer and develop LAN/WLAN/WAN networks across multiple locations
• Configure VLAN, L2 switching, L3 routing, and routing protocols including BGP
• Maintain inter-site connectivity via site-to-site VPN and remote access VPN
• Ensure link redundancy, coordinate with telecom operators, and test failover mechanisms
• Monitor network availability and performance; diagnose connectivity issues
• Administer firewalls and maintain, organize, and document access rules
• Design and implement network segmentation, security zones, and inter-system communication rules
• Maintain documentation of traffic flows and the rationale for firewall rules
• Implement least-privilege access and appropriate Zero Trust mechanisms
• Plan network/security changes, run tests, and prepare rollback scenarios
• Analyze vulnerability scan and penetration test results; assess technical risk
• Set remediation priorities, owners, and timelines
• Remediate vulnerabilities within your scope and coordinate other teams and vendors
• Validate remediation effectiveness with re-scans and tests
• Maintain a register of vulnerabilities, exceptions, and risks requiring approval
• Administer Microsoft Defender for Endpoint and Defender for Office 365 (or equivalent)
• Define and verify endpoint/server hardening standards
• Configure protection mechanisms including ASR Rules; support BitLocker and Credential Guard rollout
• Co-create Intune security policy requirements and security baselines; verify effectiveness
• Coordinate with infrastructure engineering on identity protection: MFA, Conditional Access, and privileged access
• Review security recommendations and track remediation actions
• Support EDR/XDR selection and monitoring improvements
• Configure log sources, detection rules, alerts, and response scenarios
• Investigate and support incidents: limit impact, secure logs/evidence, help restore services
• Perform root-cause analysis, produce reports, and drive preventive actions
• Coordinate with external SOC/MDR and verify service quality technically
• Participate in cyber incident exercises and Disaster Recovery tests
• Maintain network diagrams, configuration documents, traffic flow documentation, and firewall rule documentation
• Create response procedures and runbooks for the Service Desk
• Co-author security standards and procedures aligned with GBA Group requirements
• Support risk assessments and audits by providing evidence and documentation
• Contribute to cyber awareness activities, including phishing simulations
• Coordinate vendors technically and communicate risks, progress, and recommended solutions

Benefits

• Employment contract and hybrid work model
• Real impact on IT network development and security level
• Technical autonomy to lead implementations end-to-end (diagnosis through testing and acceptance)
• Collaboration with local specialists and international teams
• Projects directly supporting data protection and lab operational continuity