About the Role
Assure that Liberty Global's core and global tier-1 network has sound security protection and that product security is monitored. This role involves close collaboration with network architects, engineering, operational, and global security teams to identify improvements, drive network hygiene, and provide specialized skills for investigations. The role requires translating security findings into risks and advising the organization on blocking issues and acceptable risk.
Responsibilities
- Identify and drive improvements on Network Security on the tier-1 core network.
- Identify and advise ISP networks to implement similar security measures and monitoring.
- Review and generate technical specifications/documentation.
- Translate, create, and hand over network monitoring use cases and threat playbooks to incident response teams.
- Act as a mentor, technical lead, and escalation point for other engineers.
- Monitor and respond to incidents.
- Serve as an authority on Internet security related questions on topics like Network Hygiene, MANRS, DDoS mitigation, BGP routing and traffic analysis.
- Trace and identify sources of BGP hijacks, BGP leaks, DDoS, malware or other abuse traffic.
- Review and update/improve security requirements set in policies/guidelines and ensure they follow industry best practice.
- Identify potential areas of improvement and drive implementation.
- Liaise with the Global Security Operations Centre, LG and external operational teams and other Business units to set priorities for maximum effect.
- Work with and understand deliverables of external bodies like M3AAWG, CableLabs, RIPE, and other security and standards organizations to assure Liberty Global networks and services follow industry Best Practice regarding Security areas.
- Work with internal/external working groups to support improving network security and reduce impact of Denial of Service attack factors or other service disruptive activities.
Requirements
- Solid grasp of Networking, Security and Monitoring.
- Experience and expertise in securing and protecting large (ISP) networks.
- Familiarity with network hygiene measures such as BCP38/84 anti-spoofing protection, RPKI, and other BGP routing BCPs, RIRs, and Internet Routing Registries, DNS/DNSSEC, and domain registration.
- Strong grasp of network security vulnerabilities and protections like: Denial of Service attacks and mitigation, BGP Hijacking, CoPP, access-lists, Tacacs, Spam/malware/abuse.
- Experience in presenting findings and making recommendations to other operational teams.
- Experience in working with many collaborators to improve security and incident response both internal and external in an international community.
- Demonstrated ability in an ISP environment and Internet security arena.
- Experience with Internet organizations like RIR's and domain name registries and tools like whois/RDAP, RIPE RIS, BGP and DNS monitoring.
- Solid understanding of network security, security monitoring, and layers of defense principles.
Skills
- Fluency in English (speaking/writing)
- Superb communication skills
- Networking
- TCP/IP
- IPv4/IPv6
- BGP
- RPKI
- Control Plane Policing (CoPP)
- DNS/DNSSEC
- Protection against DOS attacks, amplification factors and mitigation techniques
- Security analytics capabilities
- Monitoring and analytics solutions (e.g. Arbor threat mitigation suite, Splunk, Grafana, Elastic Stack etc…)
- Basic scripting/programming/database skills
- Ability to prioritize effectively
- Ability to work independently
- Ability to work well under pressure
Location
- Netherlands
Work Type
- Full-time
Experience Level
- Senior
Education Level
- RIPE NCC certification (Database/BGP security) is a plus
Salary/Compensations
- Competitive salary + Bonus
Benefits
- 25 days annual leave with the option to purchase 5 more
- Free access to LinkedIn Learning & Coursera
- Company Pension Contributions
- Free premium subscription to Calm (NL only)
- Free public transport subscription (NL only)
- Subsidy on health insurance premium
- Company Laptop
- Mobile and Phone Subscription
About the Company
- Liberty Global is a world leader in converged broadband, video and mobile communications and an active investor in cutting-edge infrastructure, content and technology ventures.
- With investments in fibre-based and 5G networks, Liberty Global plays a vital role in society, providing over 85 million fixed and mobile connections and rolling out next-generation products and services.
- The company operates national brands such as Virgin Media-O2 in the UK, VodafoneZiggo in The Netherlands, Telenet in Belgium, Sunrise in Switzerland, Virgin Media in Ireland and UPC in Slovakia.
- Liberty Global Ventures, the global investment arm, has a portfolio of more than 75 companies and funds across content, technology and infrastructure.
- The company prioritizes diversity, equity and inclusion in its workplace and communities, while reducing its impact on the environment, using technology as a force for good.
Equal Opportunity
- Liberty Global is an equal opportunity employer.
- We embrace diversity and are committed to creating an inclusive environment for our people.
- We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process.
- We’re 100% committed to having a workforce that represents every part of our society.
- So we’re keen to hear from candidates of all background and circumstances.
