Lead SOC Engineer

Anson McCade; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Hybrid work model

Competitive benefits package

Job summary

Anson McCade is seeking a Lead Technical Engineer to own the technical design and delivery of enterprise-scale SOC solutions for a major defence programme. You will work across cloud and on-premise environments, leading design of cutting-edge cyber defence platforms and collaborating with customers and technical teams.

The role requires hands-on technical work plus leadership, with experience in SOC design, SIEM/XDR, and secure enterprise architectures.

Qualifications

• Experience designing or implementing enterprise SOC/cyber security solutions.
• Strong knowledge of SIEM platforms (Microsoft Sentinel, Splunk).
• Experience with Defender/XDR, EDR, SOAR or Vulnerability tools.
• Networking fundamentals and security concepts.
• Experience across Windows, Linux, and cloud (Azure/AWS).
• Knowledge of enterprise security architecture and threat detection.

Responsibilities

• Lead the design and delivery of SOC solutions from architecture to deployment.
• Produce HLDs and LLDs for enterprise security platforms.
• Design, configure and integrate SIEM, XDR and vulnerability tools.
• Work across cloud and on-premise infrastructure with secure, scalable solutions.
• Collaborate with customers, architects and engineering teams throughout the project lifecycle.
• Support implementation, testing and deployment ensuring quality and governance.
• Provide technical leadership and mentoring to engineering teams.

Skills

SOC design

SIEM (Microsoft Sentinel)

Splunk

XDR/EDR/SOAR

Networking TCP/IP

Windows/Linux/Cloud

Security architecture

Stakeholder communication

Regulated environments

MITRE ATT&CK

Technical design docs

Job description

Lead Technical Engineer (Cyber Security / SOC)

• Location: Guildford / Frimley (Hybrid - 1 day a week)
• Security Clearance Eligibility Required

The Opportunity

We're supporting a leading technology and defence organisation as they build a brand-new Security Operations Centre (SOC) capability for a major international defence programme.

This is an opportunity for an experienced cyber security engineer to take ownership of the technical design and delivery of enterprise-scale SOC solutions. Working across both cloud and on-premise environments, you'll lead the design of cutting-edge cyber defence platforms, collaborate with customers and technical teams, and play a key role in protecting highly secure environments.

This role would suit someone with experience designing and implementing SOC technologies, SIEM platforms and enterprise security solutions who enjoys combining hands-on technical work with technical leadership.

Responsibilities

• Lead the design and delivery of Security Operations Centre (SOC) solutions from high-level architecture through to deployment.
• Produce High-Level and Low-Level Designs (HLDs & LLDs) for enterprise security platforms.
• Design, configure and integrate SIEM, XDR and vulnerability management technologies.
• Work across cloud and on-premise infrastructure, ensuring secure, scalable and resilient solutions.
• Collaborate with customers, architects and engineering teams throughout the project lifecycle.
• Support implementation, testing and deployment activities while ensuring technical quality and governance.
• Provide technical leadership and mentoring to engineering teams throughout delivery.

Required Skills & Experience

• Experience designing or implementing enterprise SOC or cyber security solutions.
• Strong knowledge of SIEM platforms such as Microsoft Sentinel or Splunk.
• Experience with technologies such as Microsoft Defender/XDR, EDR, SOAR or Vulnerability Management tools.
• Strong understanding of networking fundamentals including TCP/IP, VLANs, routing, DNS and network security.
• Experience working across Windows, Linux and cloud infrastructure (Azure, AWS or similar).
• Knowledge of enterprise security architecture, threat detection and cyber defence principles.
• Excellent stakeholder engagement and technical communication skills.
• Experience working within highly regulated or secure environments is highly desirable.
• Experience with Cribl, Elastic, Tenable or similar security platforms.
• Knowledge of Threat Intelligence and MITRE ATT&CK.
• Experience producing technical design documentation.
• Previous experience within Defence, Government or National Security environments.
• Active SC or DV Clearance, or eligibility to obtain clearance.

What's on Offer

• Work on nationally significant cyber security programmes.
• Exposure to complex cloud and enterprise security environments.
• Hybrid and flexible working.
• Excellent career progression within a highly respected cyber and digital engineering organisation.
• Competitive salary, bonus and comprehensive benefits package.