Security Services Engineer II (UK)
About Corero
Corero Network Security is a leading provider of real-time Distributed Denial of Service (DDoS) protection solutions. Specializing in automatic attack detection and mitigation, Corero helps service providers, enterprises, and hosting organizations maintain network availability, performance, and uptime through advanced visibility, analytics, and reporting capabilities.
With operational centers in Marlborough, Massachusetts, USA, and Edinburgh, UK, and headquarters in London, UK, Corero is listed on the London Stock Exchange AIM market under the ticker CNS. www.corero.com
Role Summary
Corero is seeking a Security Services Engineer who thrives in a fast-paced environment and is eager to learn and take on the evolving challenges of DDoS cybersecurity.
This is an opportunity to join an agile, growing company in a high-growth cybersecurity market focused on delivering customer value and exceptional service. The Corero SOC team operates in a collaborative and flexible environment where employees are empowered to innovate and make a real impact.
In this role, you will work closely with customers and collaborate across teams including SOC, Sales, Sales Engineering, and R&D Engineering.
The Security Services Engineer will support incident response and customer data analysis within a 24x7 global Security Operations Center. The ideal candidate will have experience implementing and managing enterprise or carrier-grade networks, along with knowledge of next-generation DDoS detection and mitigation technologies.
Why Join / Career Opportunity
This role is designed for individuals early in their cybersecurity career who want real, operational experience defending against live attacks.
At Corero, you will:
Work on real DDoS attacks in production environments
Gain deep exposure to network security and incident response
Learn from experienced SOC and engineering teams
Develop skills in traffic analysis, troubleshooting, and customer support
Build a foundation for long-term growth in cybersecurity engineering or operations
What You’ll Do
• Own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Requests (ITIL-aligned)
• Lead real-time incident response, including mitigation of live DDoS attacks and complex network events
• Perform advanced 1st–3rd line triage and troubleshooting across Corero’s platform and customer environments
• Act as a subject matter expert on Corero’s real-time mitigation technology
Serve as a technical escalation point for junior engineers
• Work directly with customers and partners during high-impact incidents
• Collaborate with Engineering, Product, and Threat Intelligence teams
• Drive documentation, runbooks, and operational improvements
• Mentor junior engineers and raise team standards
• Continuously deepen your expertise in networking and DDoS mitigation
4-Day Rotating Work Schedule & Shift Structure
10-hour workdays with two rotating work patterns:
Sunday – Wednesday
Wednesday – Saturday
Teams will rotate schedules throughout the year based on operational planning and staffing requirements.
Daily Shift Coverage
To maintain continuous operational support, the
Shift Name Standard Hours
Day Shift 6:00 AM – 4:00 PM
Evening / Swing Shift 2:00 PM – 12:00 AM
Night Shift 10:00 PM – 8:00 AM
What We’re looking for
Required:
• 2–4 years of experience in networking, cybersecurity, or infrastructure
• Degree in Computer Science or related field
• Strong networking fundamentals (TCP/IP, routing, Layer 1–3 troubleshooting)
• Experience in incident response and customer-facing technical roles
• Ability to own and resolve incidents in high-pressure environments
• Strong communication skills
• Scripting/automation experience (Python, Bash, or similar)
Preferred Experience:
• BGP, FlowSpec, and traffic engineering knowledge
• NetFlow / sFlow analysis
• IDS/IPS, firewalls, Packet analysis (Wireshark, tcpdump)
• SIEM (Splunk)
• Linux and Scripting proficiency (Python/Bash)
• Virtualization (KVM, ESXi)
• CCNP or JNCIS/JNCIP/ CySA+ or GIAC GCIA/GCIH
Who You Are
• High-performing and self-sufficient
• Fast learner
• Strong communicator under pressure
• Team player and mentor
• Driven by impact and problem-solving
What we offer
Competitive compensation package
Pension Scheme
Life insurance
Medical insurance
Enhanced parental leave
Annual leave + bank holidays + birthday day off
- Department
- HR
- Locations
- Edinburgh, UK
- Remote status
- Hybrid
About Corero
Corero Network Security is a leading provider of Distributed Denial of Service (DDoS) protection solutions. We are specialists in automatic detection and mitigation solutions, that include network visibility, analytics, and reporting tools. Corero's technology provides scalable protection capabilities against both external DDoS attackers and internal DDoS threats, in even the most complex edge and subscriber environments, ensuring internet service availability and uptime. Corero's key operational centers are in Marlborough, Massachusetts, USA, and Edinburgh, UK, with the Company's headquarters in London, UK. The Company is listed on the London Stock Exchange's AIM market under the ticker CNS.