Lead Technical Engineer - SOC

Location: South East London

A leading global technology and cyber organisation is building a new Security Operations Centre to support the cyber defence of a major international defence programme. The SOC will protect a complex combination of Microsoft Cloud services and on-premises data centres operating across multiple regions and classification levels. The Lead Technical Engineer will take ownership of high-level and low-level technical design across the SOC, leading small technical teams and helping shape, deploy and integrate a broad range of cyber security technologies.

This is an ideal opportunity for a strong SOC engineer or cyber technical lead who combines hands-on technical depth with architecture, design and leadership capability. Whats on offer Salary: £72,000 £ 82,000 10% annual bonus Opportunity to play a leading role in the build of a major new SOC Hybrid working with customer-site attendance near Frimley approximately once every one to two weeks London and Frimley are ideal locations, although candidates based elsewhere can be considered where regular travel is manageable Excellent benefits package Strong long-term career progression Candidates must be eligible to obtain SC clearance What you need Strong experience designing, building, deploying and operating SOC technologies Experience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat Intelligence Proven experience producing high-level, low-level and deployment-level technical designs Experience leading technical design activities and small engineering teams Strong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDR Experience onboarding data sources and services into SIEM platforms Ability to specify infrastructure requirements including compute, storage, memory and network bandwidth Experience deploying applications across cloud, containerised and on-premises environments Strong understanding of network architecture, including TCP/IP, routing, switching, VLANs, ACLs, DNS and secure network design Good knowledge of Windows and Linux administration Understanding of scalable and resilient architecture principles Strong knowledge of security controls, least privilege, encryption and system hardening

Experience with endpoint security, EDR, Active Directory or LDAP Understanding of cyber threats, threat actors, TTPs and the operationalisation of threat intelligence Ability to oversee technical deployments and ensure entry criteria, implementation plans and rollback processes are in place Strong documentation and stakeholder-facing skills