Lead Technical Engineer - SOC

Salary: £80,000 - 80,000 per year

Requirements:

• Strong experience designing, building, deploying and operating SOC technologies
• Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence
• Proven experience producing high-level, low-level and deployment-level technical designs
• Experience leading technical design activities and small engineering teams
• Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR
• Experience onboarding data sources and services into SIEM platforms
• Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth
• Experience deploying applications across cloud, containerised and on-premises environments
• Strong understanding of network architecture, including TCP/IP, routing, switching, VLANs, ACLs, DNS and secure network design
• Good knowledge of Windows and Linux administration
• Understanding of scalable and resilient architecture principles
• Strong knowledge of security controls, least privilege, encryption and system hardening
• Experience with endpoint security, EDR, Active Directory or LDAP
• Understanding of cyber threats, threat actors, TTPs and the operationalisation of threat intelligence
• Ability to oversee technical deployments and ensure entry criteria, implementation plans and rollback processes are in place
• Strong documentation and stakeholder-facing skills

Responsibilities:

• Take ownership of high-level and low-level technical design across the SOC
• Lead small technical teams supporting the build of the SOC
• Help shape, deploy and integrate a broad range of cyber security technologies
• Design and oversee SOC technology architecture across cloud and on-premises environments
• Produce high-level, low-level and deployment-level technical designs
• Lead technical design activities and support technical deployment planning
• Specify infrastructure requirements for compute, storage, memory and network bandwidth
• Oversee onboarding of data sources and services into SIEM platforms
• Ensure entry criteria, implementation plans and rollback processes are in place for deployments
• Work with stakeholders to document and communicate technical designs and deployment plans

Technologies:

• Active Directory
• Cloud
• Support
• LDAP
• Linux
• Network
• Security
• Splunk
• TCP/IP
• Windows
• DevOps

More:

We are a leading global technology and cyber organisation building a new Security Operations Centre to support the cyber defence of a major international defence programme. Our SOC will protect a complex mix of Microsoft Cloud services and on-premises data centres operating across multiple regions and classification levels. This is a hybrid role with customer-site attendance near Frimley approximately once every one to two weeks, and London and Frimley are ideal locations, though candidates based elsewhere may be considered where regular travel is manageable. We offer a salary of £72,000 to £82,000, a 10% annual bonus, an excellent benefits package, strong long-term career progression, and the opportunity to play a leading role in building a major new SOC. Candidates must be eligible to obtain SC clearance.

last updated 31 week of 2026