Network and Security Engineer

WE ARE LANDSEC

We identify and shape places that create opportunity, enhance quality of life, and bring joy to the people connected to them.

This is how we’ve created the UK’s leading portfolio of urban places and one of the largest real estate companies in Europe.

Our £10 billion portfolio is built around premium workplaces, the country’s pre-eminent retail platform, and a residential pipeline that will redefine urban life.

We’ve honed this ability over 80 years. Spotting the opportunities, building the partnerships, and continually adapting to shape the places that meet the needs of a changing world.

Places where life happens. Where businesses grow. And where cities are defined.

LOCATION

The role is based in Victoria, London, with the majority of the working week spent in the office and the remainder working from home and / or another suitable Landsec location. Hybrid working arrangements may vary across teams depending on the nature of the role.

THE ROLE

Landsec is seeking a hands-on Network & Security Engineer for a six-month fixed-term contract to strengthen the security, resilience and operational performance of our corporate technology services.

The role will provide engineering ownership across Zscaler, Check Point firewalls, Check Point VPN, Azure services, office Wi-Fi and wider network security. It will also support Landsec’s Microsoft security estate, including Microsoft 365 E7 security capabilities, Microsoft Sentinel and Microsoft Defender, alongside vulnerability remediation and security patching.

Working with Platform and Operations, Cyber Security, architecture, service partners and managed service providers, the role will resolve operational issues, improve controls, maintain accurate technical documentation and deliver practical security improvements within the fixed-term engagement.

The contract is expected to end on 31st of March 2027.

PRINCIPLE ACCOUNTABILITIES

·   Operate, support and improve Landsec’s network and security services, including Zscaler, Check Point firewalls, Check Point VPN Management, Azure services, local and wide area network connectivity, internet access and secure remote access.

·   Maintain secure and reliable office Wi-Fi services, investigating coverage, capacity, authentication, access-control and performance issues across Landsec locations.

·   Administer and optimise Microsoft security capabilities enhancing our NIST framework score, across Microsoft 365 E7, Microsoft Sentinel and Microsoft Defender, including alert investigation, security monitoring, policy improvement and remediation activity.

·   Coordinate vulnerability remediation and security patching across relevant infrastructure and end-user technology, using risk, severity and operational impact to prioritise delivery and escalate exceptions.

·   Investigate network and security incidents, complete root-cause analysis, implement corrective actions and support recovery in accordance with Landsec incident and problem-management processes.

·   Maintain firewall rules, secure web gateway policies, network access controls and security configurations in line with least privilege, approved change control and Landsec architecture and security standards.

·   Monitor service health, security telemetry, capacity and performance; identify trends and risks; and provide concise operational reporting, evidence and recommendations.

·   Work effectively with Landsec colleagues, suppliers and managed service partners to deliver changes, resolve incidents and ensure that agreed service levels and security requirements are met.

·   Create and maintain accurate network diagrams, support procedures, configuration records, knowledge articles, risk records and operational handover documentation.

·   Support security assurance, audit and compliance activity by supplying evidence, addressing control gaps and ensuring that remediation actions are completed and recorded.

DECISION-MAKING AUTHORITY

Works with general direction and exercises independent judgement when managing technical tasks, incidents, risks and priorities. Makes changes only through approved governance and promptly escalates material security risks, significant service impact, exceptions to standards and decisions outside the role’s authority.

KEY COMPETENCIES

·   Practical problem-solving: diagnoses complex network and security issues methodically and drives them through to resolution.

·   Security judgement: understands risk, applies proportionate controls and recognises when specialist advice or escalation is required.

·   Collaboration: builds effective working relationships with colleagues, suppliers and partners and contributes to shared outcomes.

·   Communication: explains technical risk, incidents and recommended actions clearly to technical and non-technical audiences.

·   Delivery focus: plans and prioritises work effectively, maintains momentum and produces clear evidence of completion.

·   Continuous improvement: identifies repeatable improvements to tooling, processes, documentation, monitoring and control effectiveness.

ESSENTIAL CRITERIA

·   Demonstrable hands-on experience supporting and securing enterprise LAN, WAN, internet, remote-access and office Wi-Fi services.

·   Strong operational experience with Zscaler services, Check Point firewalls, Check Point VPN and Azure Services including policy administration, troubleshooting, access control and change implementation.

·   Practical experience of Microsoft security tooling, including Microsoft Sentinel and Microsoft Defender, within a Microsoft 365 environment. Experience with Microsoft 365 E7 security capabilities is required for this assignment.

·   Experience managing vulnerability remediation and security patching, including prioritisation, testing, deployment coordination, exception handling and evidence-based reporting.

·   Experience investigating security and network incidents using logs, alerts and other telemetry, and implementing corrective or preventative actions.

·   Good understanding of identity and access controls, multi-factor authentication, least privilege, network segmentation, secure configuration and modern security principles.

·   Ability to produce and maintain clear technical documentation, operational procedures, network diagrams and support handover material.

·   Ability to operate effectively in a time-limited role, quickly understand an existing environment and deliver prioritised improvements with minimal supervision.

DESIRABLE EXPERIENCE

·   Experience integrating Microsoft Sentinel with network, firewall, endpoint, identity and cloud security data sources.

·   Experience with Microsoft Defender for Endpoint, Defender for Identity, Defender for Office 365 and Defender for Cloud Apps.

·   Experience of wireless network survey, optimisation, authentication or access-control technologies in corporate offices.

·   Working knowledge of security frameworks and good practice such as the NIST Cybersecurity Framework, CIS Controls, Cyber Essentials or ISO/IEC 27001.

·   Relevant vendor or industry certifications covering Zscaler, Check Point, Microsoft Security or enterprise networking.

SUCCESS DURING THE FIXED-TERM CONTRACT

·   Priority network and security risks, incidents and control gaps are visibly reduced or placed under an agreed remediation plan.

·   Zscaler, Check Point, office Wi-Fi and Microsoft security services have accurate support documentation, ownership and operational procedures.

·   Patching and vulnerability remediation are supported by clear prioritisation, exception management, reporting and evidence.

·   Operational knowledge and outstanding actions are handed over clearly before the end of the fixed-term contract.

Life and Benefits at Landsec

Diversity and Inclusion

At Landsec, we value diversity & inclusion. We work to better reflect the diversity of the communities we work within and empower everyone who works at Landsec to realise their potential.

We strive to ensure all our information, and services are accessible to and usable by everyone. If you would like to receive any information in a different way or would like us to do anything differently to help you apply for our roles, please get in touch with our recruitment partners by emailing [email protected]

To find out more about our approach, visit our Diversity and Inclusion page.