Cyber Defence Network Engineer

Alternatively, Grant Thornton

At Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance. A true alternative.

With over 5,000 people in the UK, and a presence in 150 global markets, we're on an ambitious journey, from great to exceptional, and we need the best people to help us achieve our potential. And with that comes the opportunity to help redefine what our industry looks like, and what you want from your career.

Job Description:

Alternatively, Grant Thornton

At Grant Thornton we do things differently - looking to the future, driving ambitious growth and pioneering positive change in our industry. Providing audit, tax and advisory services, we empower clients through strategic insight, curiosity, and genuine partnership. And we empower our people with real opportunity, an inclusive culture and work life balance. A true alternative.

With over 5,000 people in the UK, and a presence in 150 global markets, we're on an ambitious journey, from great to exceptional, and we need the best people to help us achieve our potential. And with that comes the opportunity to help redefine what our industry looks like, and what you want from your career.

The Grant Thornton Cyber Defence Centre is an award-winning
* managed security services provider operating at the forefront of cyber security, using industry-leading technologies to protect and support our clients. Alongside our SOC capability, we have cutting-edge incident response teams delivering rapid cyber breach investigations for clients through insurance panels and direct engagements, supporting organisations at their most critical moments.

We invest heavily in our people, offering clear progression opportunities and encouraging initiative within a collaborative, cross-functional environment with a strong team ethos. Support is always available across the Sec Ops, DFIR, MSS and wider cyber teams.

We're seeking an experienced Network Engineer to join our Cyber Defence Centre. This is a hands‑on technical role that spans live incident response, security assessment and hardening, and the design and delivery of managed security solutions in client environments. You will be one of the people clients rely on to shut an attacker out of their estate and then help make sure it does not happen again.

As a Network Engineer within the Cyber Defence Centre, you will deliver the containment and recovery phases of live client incidents, and work on assessment, hardening and implementation engagements between them.

Delivering the containment and recovery phases of live client security incidents, including ransomware, business email compromise and perimeter device exploitation.

Isolating affected systems and accounts, restricting compromised identities, closing off attacker access routes, and preventing further spread across the estate.

Preserving logs and evidence for the forensic investigation team, and working alongside them as the investigation develops.

Supporting client recovery, including rebuild and restoration sequencing driven by business priority, and ensuring known weaknesses are not reintroduced.

Implementing the remediation and hardening work identified through the incident, where clients engage us to deliver it.

Working to the NIST Cyber Security Framework and incident response lifecycle, with CIS Benchmarks used for technical control recommendations.