Network Security Tool Manager

Nextlink is seeking an experienced Network Security Tool Manager to support the Cyber Security Operations Centre (CSOC) of an international defence organisation. The position focuses on the administration, maintenance and continuous improvement of enterprise network security monitoring and visibility capabilities. The successful candidate will be responsible for ensuring the availability, performance and operational effectiveness of security monitoring, traffic aggregation and packet capture platforms supporting cyber defence operations. This is a hands-on technical assignment requiring experience in large-scale, distributed network environments and enterprise security monitoring technologies., Security monitoring platform management

• Manage the operational lifecycle of network security monitoring and packet capture platforms, including deployment, configuration, maintenance, upgrades and decommissioning.

• Configure, maintain and optimise network visibility, traffic aggregation and packet capture technologies.

• Monitor platform health, availability, performance, storage utilisation, retention and data quality.

• Identify and address network visibility gaps affecting security monitoring and threat detection.

• Troubleshoot Linux, network connectivity, packet flow, interface and system-level issues.

• Maintain technical documentation, architecture diagrams, inventories and operational procedures.

Cyber defence capability support

• Maintain the network visibility and security monitoring capabilities required for CSOC operations.

• Support the design and implementation of monitoring solutions aligned with operational requirements.

• Work with security analysts and detection engineering teams to improve monitoring coverage.

• Support integration with wider security operations, analytics and incident management capabilities.

• Conduct capacity planning and scalability assessments.

• Identify operational risks and recommend technical improvements.

• Support compliance, audit and technical assurance activities.

Technical coordination and project support

• Provide technical expertise in network visibility, packet capture, security monitoring and telemetry collection.

• Support infrastructure deployments, cabling activities, site surveys and technical implementation planning.

• Coordinate platform maintenance and vendor support activities.

• Contribute to infrastructure projects and service transition activities.

• Support cyber defence exercises when required.

• Coordinate with military and civilian technical stakeholders in an international defence environment., * A technically demanding environment: Work with enterprise-scale security monitoring, network visibility and packet capture technologies supporting complex and distributed defence infrastructure.

• Specialist technical responsibility: Apply your experience to the operation, optimisation and continuous improvement of critical cyber defence platforms.

• Operational exposure: Work within an international defence environment alongside military and civilian technical specialists.

• Professional collaboration: Engage with security operations, detection engineering, infrastructure teams and technology providers on operational and technical matters.

• A defined assignment: A clearly scoped engagement with established technical responsibilities, deliverables and working arrangements.

Candidates should demonstrate the following experience:

• Strong knowledge of network security monitoring and cyber defence operations.

• Extensive hands-on experience supporting large-scale, distributed security monitoring deployments across multiple networks, sites, segments or data centres.

• Enterprise experience with security monitoring and packet capture platforms, particularly Cisco Firepower, Corelight and NetWitness.

• Practical experience with network visibility technologies, traffic aggregation, network packet brokers and packet capture.

• Experience in platform health monitoring, performance management, capacity planning and operational governance.

• Advanced understanding of enterprise networking, protocols, architectures and data flows.

• Practical Linux and network troubleshooting experience, including connectivity, packet flow, interfaces and system-level diagnostics.

• Experience supporting physical infrastructure deployments, cabling and site surveys.

• Knowledge of security telemetry collection, event correlation, threat detection and threat hunting., Relevant experience: Further develop your experience in enterprise cyber defence infrastructure and multinational security operations.