Role Title: Network Product Owner
Start Date: ASAP
End Date: 18th December 2026
Rate: £630
Location: Manchester 3 days on site
JD -
Network Security Technical Product Owner - the clients Global Network Services, you should possess
the following skillsets:
- Network Security Product Strategy and Vision: Ability to define, document, and communicate a clear network security product vision aligned with Zero Trust principles, organizational governance frameworks, and regulatory compliance requirements. Deep understanding of security policy lifecycle management, identity and access management integration, micro-segmentation strategies, and continuous verification principles. Skilled in managing network security product backlog prioritized based on risk assessment, business value, and threat landscape, with deep collaboration with security operations, infrastructure, and compliance teams. Strong understanding of API-level integration between security platforms and orchestration systems.
- Previous Hands-on expertise in one or more of the following areas: design and build of secure, fault-tolerant enterprise-class distributed network security systems with business-facing APIs/Web UIs, ensuring successful adoption and rotation at scale across domains including Zero Trust Network Access (ZTNA) for Remote Access and Proxy services, Network Access Control (NAC), Next[1]Generation Firewalls (NGFW), Intrusion Detection/Prevention Systems (IDS/IPS), and Security Information & Event Management (SIEM) integration, spanning physical, virtual, and cloud environments.
- Strong understanding of network security technology fundamentals including Zero Trust Architecture (ZTA) principles, Software[1]Defined Perimeter (SDP), identity-aware proxy architectures, 802.1X authentication, certificate-based authentication, policy-based access control, stateful/stateless firewall technologies, threat intelligence integration, and network segmentation strategies.
Expertise in security policy modelling, documentation of end-to-end security workflow specifications (e.g., threat models, security control frameworks, policy decision flows), security architecture diagrams, and governance framework documentation aligned with industry standards (NIST, ISO 27001, CIS Controls).
Desired Knowledge -
- Knowledge of DevSecOps tooling, GitOps for security-as-code, CI/CD pipelines for security policy deployment, Infrastructure-as[1]Code (IaC) security scanning, security automation frameworks, and version control for security configurations. Working knowledge of cloud-native security services: Cloud Access Security Brokers (CASB), cloud firewall services, identity federation, secure access service edge (SASE), zero trust network access platforms, security posture management, and cloud IAM integration.
- Compliance and Regulatory Controls - Strong knowledge of security frameworks and standards (NIST Cybersecurity Framework, ISO 27001/27002, PCI-DSS, SOC 2) and experience designing and implementing solutions using commercial and open-source security tools for lifecycle management of enterprise security infrastructure. Understanding of ITIL for security incident and problem management, risk management frameworks, and security governance processes.
- Proficiency in Agile Methodologies - Jira/Confluence, Scrum/Kanban, security backlog and workflow management, and security[1]specific SRE reporting metrics (Mean Time to Detect - MTTD, Mean Time to Respond - MTTR, Mean Time to Remediate, deployment frequency, security control effectiveness, Security Level Objectives - SLO).
