Network & Security Engineer

About the role

Capula is looking for a hands-on Network & Security Engineer with deep expertise in Cisco networking, firewall management and SD-WAN, and a strong security-first mindset. The role is office-based and requires five days per week on site. It combines network engineering with proactive security ownership, covering design, maintenance and strengthening of the firm's network and security infrastructure against an evolving threat landscape.

Key responsibilities

• Design, implement and maintain the network infrastructure (Cisco routers, switches, firewalls, VPNs, wireless) and the SD-WAN fabric across all sites.
• Manage firewall infrastructure, including rule-base management, policy design, segmentation and regular audits.
• Lead security operations: threat detection, incident response, vulnerability management, log analysis, anomaly detection and threat hunting.
• Drive security hardening across network devices, servers, endpoints and cloud-adjacent systems, and design secure architectures with segmentation and access control built in.
• Run network and vulnerability assessments and penetration tests, and manage tools such as SIEM, EDR, IDS/IPS and endpoint protection.
• Act as escalation point for 2nd and 3rd line incidents, and work on an on-call rotation.
• Maintain network diagrams, firewall rule documentation, incident response playbooks, SOPs and runbooks, and collaborate with infrastructure and technology teams.

Required profile

• Minimum 7+ years' experience in infrastructure, networking and security roles.
• Demonstrated experience implementing patch management, system hardening, endpoint protection, identity and access management.
• Experience with virtualisation (VMware) and enterprise storage (SAN/NAS); scripting or automation (PowerShell, Bash) is advantageous.
• Experience in financial services or regulated environments is preferred.
• Able to balance BAU with project delivery, communicate clearly with technical and non-technical stakeholders, and take ownership end to end.

Required skills

• Cisco networking and firewall management, including TCP/IP, VLANs, VPNs, DNS and DHCP.
• Windows Server and Linux (Red Hat/CentOS).
• Security controls, SIEM, EDR, IDS/IPS and endpoint protection.