Lead Technical Engineer

5 days a week in Frimley

£650-£750

Requires Active SC Clearance

• Leading the design of a range of security and security related solutions across High level designs, Low level design and Deployment Level Designs, including specification of interfaces between solution components.
• Support the design and configuration of a range of security tools
• Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools.
• Support the creation and establishment of both cloud hosting and containers, and OnPrem hosted VM's and containers, apply security controls and compliance frameworks.
• Support the design and configuration of network security devices, network routers and switches, establishment of VLANs, DNS and identity management capability
• Support deployment of security tools
• Develop test procedures to test solutions meet functional and non-functional requirements
• Support creation and maintenance of requirements and user stories and ensuring that all user stories and requirements are tracked and traceable to solution components.
• Oversee deployment / implementation activities ensuring that entry criteria are met, all planned activities are completed and that rollback plans are initiated where required.
• Review and approve all required documentation as part of a release or change including design, deployment, configuration and administration guides.
• The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures.
• Develop test procedures to test solutions meet functional and non-functional requirements
• Generalist Technical SME to support deployment and configuration of various tools

• Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion.
• Experience deploying and configuring applications in a performant manner on cloud and / or OnPrem to support high data ingest rates.
• Proven delivery and experience leading conducting onboarding activities onto a SIEM
• Knowledge of OnPrem architectures & design including:
  • Security controls and detection tools.
  • Networking and Secure network architectures
    • Understanding of OSI and TCP/IP models.
    • IP addressing, subnetting, and routing protocols.
    • Knowledge of LAN/WAN configurations and network security (ACLs, VLANs).
  • Compute Services
  • Storage Services
  • Understanding of security best practices (least privilege, encryption).
  • Understanding how to design scalable and resilient architectures.
  • OS installation and administration
• Cybersecurity Fundamentals
  • Understanding of common threats (malware, phishing, DDoS) and mitigation techniques.
  • Proficiency in risk assessment and vulnerability management.
• Security Systems Administration
  • Experience managing endpoint security solutions (antivirus, EDR tools).
  • Proficiency in user access control (Active Directory, LDAP).
  • Ability to configure and maintain secure system policies (hardening servers).
• Other
  • Understanding of typical Security Operations Organisation Structures, Policy and Processes.

• Good knowledge and experience of common Enterprise ICT services.
• Detailed understanding of threat intelligence and threat actors, TTPs and ope rationalising threat intelligence.

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.