Scotland/Hybrid
Schedule: Rotating shift (includes nights/weekends)
Salary up to £80,000
You will own incidents end-to-end across Incident, Major Incident, Change, Problem, and Service Request workflows (ITIL-aligned), leading real-time response to live DDoS attacks and complex network events as they unfold. Day to day, that means performing advanced 1st–3rd line triage and troubleshooting across the platform and customer environments, acting as a subject matter expert on our real-time mitigation technology, and serving as the technical escalation point for junior engineers.
You will work directly with customers and partners during high-impact incidents, collaborate closely with Engineering, Product, and Threat Intelligence to feed insight back into the platform, and drive the documentation, runbooks, and operational improvements that raise the bar for the whole team. Mentoring junior engineers and continuously deepening your own networking and DDoS expertise are part of the job, not an extra.
What we are looking for:
2–4 years' experience in networking, cybersecurity, or infrastructure
Degree in Computer Science or a related field
Strong networking fundamentals — TCP/IP, routing, Layer 1–3 troubleshooting
Proven experience in incident response and customer-facing technical roles
The temperament to own and resolve incidents under real pressure
Excellent communication skills — clear, calm, customer-ready
Scripting and automation ability (Python, Bash, or similar)
Nice to have
BGP, FlowSpec, and traffic engineering knowledge
NetFlow / sFlow analysis
IDS/IPS, firewalls, and packet analysis (Wireshark, tcpdump)
SIEM experience (Splunk)
Linux proficiency
Virtualisation (KVM, ESXi)
Certifications such as CCNP, JNCIS/JNCIP, CySA+, GIAC GCIA or GCIH
Bright Purple is an equal opportunities employer: we are proud to work with clients who share our values of diversity and inclusion in our industry
Salary description
£60000.00 - £80000.00 per year