Lead Technical Engineer - SOC

A leading global technology and cyber organisation is building a new Security Operations Centre to support the cyber defence of a major international defence programme. The SOC will protect a complex combination of Microsoft Cloud services and on-premises data centres operating across multiple regions and classification levels.

The Lead Technical Engineer will take ownership of high-level and low-level technical design across the SOC, leading small technical teams and helping shape, deploy and integrate a broad range of cyber security technologies. This is an ideal opportunity for a strong SOC engineer or cyber technical lead who combines hands-on technical depth with architecture, design and leadership capability.

• Salary: £72,000 £82,000
• 10% annual bonus
• Opportunity to play a leading role in the build of a major new SOC
• Hybrid working with customer-site attendance near Frimley approximately once every one to two weeks
• London and Frimley are ideal locations, although candidates based elsewhere can be considered where regular travel is manageable
• Excellent benefits package
• Strong long-term career progression
• Candidates must be eligible to obtain SC clearance

• Strong experience designing, building, deploying and operating SOC technologies
• Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence
• Proven experience producing high-level, low-level and deployment-level technical designs
• Experience leading technical design activities and small engineering teams
• Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR
• Experience onboarding data sources and services into SIEM platforms
• Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth
• Experience deploying applications across cloud, containerised and on-premises environments
• Strong understanding of network architecture, including TCP/IP, routing, switching, VLANs, ACLs, DNS and secure network design
• Good knowledge of Windows and Linux administration
• Understanding of scalable and resilient architecture principles
• Strong knowledge of security controls, least privilege, encryption and system hardening
• Experience with endpoint security, EDR, Active Directory or LDAP
• Understanding of cyber threats, threat actors, TTPs and the operationalisation of threat intelligence
• Ability to oversee technical deployments and ensure entry criteria, implementation plans and rollback processes are in place
• Strong documentation and stakeholder-facing skills