AI-Driven SOC Engineering Manager | Hybrid & Security Leadership

Clio; City Of London; Hybrid; GBP 104,000 - 156,000; Full time

Benefits offered by this job

Competitive salary

Flexible hybrid work environment

25 days holiday + bank holidays

Private Healthcare with Life Insurance

Pension contribution

Professional development and growth

Clioversary recognition program

Job summary

Clio is building an AI-driven Security Operations Center and seeks an engineering leader to build both the Blue Team software and the team itself. You’ll lead detection pipelines, automated responses, and integrations with Clio’s products and infrastructure while staying close to the code.

As a builder-leader, you’ll hire, set direction, review PRs, and mentor engineers. You’ll work with the Red Team and Threat Intelligence to harden systems, detect abuse, and drive follow-the-sun coverage

Qualifications

• Strong software development skills and direct impact on code
• Experience leading engineers or tech leads who grew into leadership
• Hands-on security experience: secure development, finding and fixing vulnerabilities
• Comfort making automation/AI decisions where risk is bounded
• Clear communication with engineers, leadership, and partner teams

Responsibilities

• Lead the design and build of an AI-driven SOC that monitors, triages, investigates, and responds with minimal human toil
• Treat manual alert handling as candidates for automation and measure system closure
• Own detection engineering: detection-as-code, testing, tuning
• Ensure automation is trustworthy with guardrails, audit trails, and escalation paths
• Collaborate with the wider security team on incident response and feedback into the system
• Turn threat intel into concrete hardening work and detection coverage with Threat Intelligence
• Prioritize infrastructure hardening across cloud, identity, and endpoints based on attacker behaviour
• Work on core security functionality of Clio's products and push controls into the platform
• Partner with Red Team to find, fix, and verify vulnerabilities; run detection coverage exercises
• Build automated detection for abuse of Clio's products and automate responses
• Hire, grow, and retain a team of engineers; set direction and visibility of progress
• Scale the team toward follow-the-sun coverage

Skills

Software development

People management

Security engineering

Automation/AI decisions

Communication

Education

Security certifications (CISSP/GIAC/OSCP)

Tools

SIEM

SOAR

AI/ML tooling

Code review

Job description

Clio is building an AI-driven Security Operations Center and seeks an engineering leader to build both the Blue Team software and the team itself. You’ll lead detection pipelines, automated responses, and integrations with Clio’s products and infrastructure while staying close to the code.

As a builder-leader, you’ll hire, set direction, review PRs, and mentor engineers. You’ll work with the Red Team and Threat Intelligence to harden systems, detect abuse, and drive follow-the-sun coverage