Lead Technical Engineer

Sanderson Government & Defence; Frimley; On-site; GBP 120,000 - 138,000; Full time

Job summary

Sanderson Government & Defence seeks a Lead Technical Engineer to drive design and deployment of cyber security solutions in Frimley. The role requires experienced leadership across SOC technologies, cloud/on-prem deployments and secure networks, with active SC clearance.

You will define infrastructure requirements, support tool configuration, and test procedures while ensuring traceability of requirements to solution components and robust release documentation.

Qualifications

• Knowledge of design, build and deployment of SOC technology across multiple tools.
• Experience with cloud hosting and on-prem VM/container deployments.
• Understanding of network security devices, VLANs and DNS concepts.
• Active SC Clearance is required for this role.

Responsibilities

• Lead the design of security solutions across high/low/deployment level designs and interfaces.
• Support configuration of security tools and infrastructure requirements.
• Develop test procedures ensuring functional and non-functional requirements.
• Oversee deployment activities with entry criteria and rollback plans if needed.
• Review documentation for releases and changes including security controls.

Skills

SOC design

SIEM

SOAR

EDR

Threat intelligence

Cloud security

Job description

Lead Technical Engineer

5 days a week in Frimley

£650-£750

Requires Active SC Clearance

Responsibilities

• Leading the design of a range of security and security related solutions across High level designs, Low level design and Deployment Level Designs, including specification of interfaces between solution components.
• Support the design and configuration of a range of security tools
• Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools.
• Support the creation and establishment of both cloud hosting and containers, and OnPrem hosted VM's and containers, apply security controls and compliance frameworks.
• Support the design and configuration of network security devices, network routers and switches, establishment of VLANs, DNS and identity management capability
• Support deployment of security tools
• Develop test procedures to test solutions meet functional and non-functional requirements
• Support creation and maintenance of requirements and user stories and ensuring that all user stories and requirements are tracked and traceable to solution components.
• Oversee deployment / implementation activities ensuring that entry criteria are met, all planned activities are completed and that rollback plans are initiated where required.
• Review and approve all required documentation as part of a release or change including design, deployment, configuration and administration guides.
• The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures.
• Develop test procedures to test solutions meet functional and non-functional requirements
• Generalist Technical SME to support deployment and configuration of various tools

Core Duties

• Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion.
• Experience deploying and configuring applications in a performant manner on cloud and / or OnPrem to support high data ingest rates.
• Proven delivery and experience leading conducting onboarding activities onto a SIEM
• Knowledge of OnPrem architectures & design including:
  • Security controls and detection tools.
  • Networking and Secure network architectures
    • Understanding of OSI and TCP/IP models.
    • IP addressing, subnetting, and routing protocols.
    • Knowledge of LAN/WAN configurations and network security (ACLs, VLANs).
  • Compute Services
  • Storage Services
  • Understanding of security best practices (least privilege, encryption).
  • Understanding how to design scalable and resilient architectures.
  • OS installation and administration
• Cybersecurity Fundamentals
  • Understanding of common threats (malware, phishing, DDoS) and mitigation techniques.
  • Proficiency in risk assessment and vulnerability management.
• Security Systems Administration
  • Experience managing endpoint security solutions (antivirus, EDR tools).
  • Proficiency in user access control (Active Directory, LDAP).
  • Ability to configure and maintain secure system policies (hardening servers).
• Other
  • Understanding of typical Security Operations Organisation Structures, Policy and Processes.

Additional Skills

• Good knowledge and experience of common Enterprise ICT services.
• Detailed understanding of threat intelligence and threat actors, TTPs and operationalising threat intelligence.

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.