Infrastructure Security Operations Engineer (AVP) - Banking

My client, a reputable global bank, is expanding its Infrastructure Security Operations team to strengthen vulnerability management, infrastructure security and automated remediation capabilities across its technology estate. What you'll do: Vulnerability Remediation & Technical Ownership - Own the design and delivery of network vulnerability remediation solutions, from assessment and prioritisation through to implementation, validation and closure. - Design, test and implement OS and firmware upgrades across routers, switches, firewalls, load balancers and DNS/DHCP/IPAM platforms. - Support Windows and Linux server vulnerability remediation, including incident on-call support. - Assess critical, emerging and zero-day vulnerabilities, implementing remediation solutions or compensating controls. - Troubleshoot patching and upgrade issues, ensuring appropriate configuration backups, validation and rollback procedures. - Implement infrastructure hardening, segmentation and access controls in line with CIS and vendor security benchmarks. Analysis, Prioritisation & Reporting - Analyse large volumes of vulnerability and configuration data, identifying risks and prioritising remediation plans. - Prioritise vulnerabilities using CVSS, EPSS, CISA KEV, asset criticality and threat intelligence. - Use vulnerability management and ITSM platforms to track remediation, validate findings and maintain audit-ready evidence. - Work with asset and CMDB owners to improve data quality and asset information. - Plan and deliver vulnerability remediation initiatives through formal change management processes. - Develop and maintain technical runbooks, standard operating procedures and audit-ready documentation. - Automate vulnerability data processing, evidence collection and pre/post-change checks. What you'll bring: - Proven experience operating, upgrading and troubleshooting enterprise network devices in a production environment. - Deep understanding of the OSI model, including VLANs, spanning tree, routing, OSPF and BGP. - Strong hands-on experience with Cisco and meaningful production experience across at least two of the following technology areas: enterprise firewalls, application delivery controllers/load balancers, and DNS/DHCP/IPAM platforms. Experience with Palo Alto Networks, Check Point, F5, Infoblox or Citrix NetScaler is particularly relevant. - Experience planning and carrying out network OS and firmware upgrades, including configuration backup, service validation, restore and rollback. - Experience in vulnerability management, including interpreting scanner findings, vulnerability scoring, exploitability, vendor advisories and remediation evidence. - Experience using enterprise vulnerability-management and ITSM platforms to validate findings, manage remediation workflows and maintain evidence, such as Qualys, Tenable, Rapid7, ServiceNow Vulnerability Response or equivalent platforms. - Strong analytical skills, with the ability to work through large, unstructured data sets, identify patterns and turn them into prioritised remediation plans and operational reports. - Meaningful working knowledge of Windows and Linux vulnerabilities, including operating-system components, services, dependencies, patching risks and validation considerations. - Experience working within formal change management, ITSM, project-delivery and CMDB processes. - CCNA, CCNP or equivalent demonstrable enterprise networking knowledge and experience. - Willingness to participate in incident on-call and to perform planned overnight and weekend maintenance work. - Experience scripting and automating infrastructure or vulnerability-management activities using PowerShell and/or Python. - Network automation experience using technologies such as Ansible, REST APIs and Git. - Experience automating pre- and post-change validation, evidence collection and vulnerability-data processing. - Experience producing vulnerability and remediation reporting using Power BI or equivalent reporting and data-visualisation tools. - General knowledge of Microsoft Azure networking and security controls. - Awareness of DORA and PRA/FCA operational resilience requirements. - Experience in financial services or another regulated industry are strong advantages - Relevant security, cloud, network or vulnerability-management certifications. Robert Walters Operations Limited is an employment business and employment agency and welcomes applications from all candidates