Lead Technical Engineer

Sanderson Government and Defence; Frimley Green; On-site; GBP 120,000 - 138,000; Full time

Job summary

Sanderson Government and Defence seeks a Lead Technical Engineer to head design work for SOC solutions. You will lead high and low level designs across Cloud and OnPrem deployments, specify interfaces, and guide tool deployment with strong cyber security practices. Active SC clearance is required.

You will manage teams, develop tests, and ensure traceability of requirements to solution components while delivering secure, scalable architectures.

Qualifications

• Experience designing, building, deploying and operating SOC tech.
• Lead two or more of SIEM, SOAR, EDR, Vulnerability Mgmt, Threat Intelligence.
• Experience deploying apps in cloud or OnPrem for high data ingest.
• SIEM onboarding and design experience.

Responsibilities

• Lead high and low level design work for SOC solutions.
• Oversee deployment and rollout activities with rollback planning.
• Review and approve design, deployment and admin guides for releases.
• Coordinate with teams to ensure traceability of requirements to solution components.
• Provide cyber security SME support for deployment across tools.

Skills

SOC design

SIEM

SOAR

EDR

Vulnerability Mgmt

Threat Intelligence

Cloud/OnPrem

Networking & TCP/IP

Security Controls

Active SC Clearance

Tools

Cloud hosting

Containers & VM

OnPrem VM's

Security devices & DNS

Job description

Lead Technical Engineer

5 days a week in Frimley£650-£750Requires Active SC ClearanceWe are looking for a talented and enthusiastic individual with excellent technical and client-facing skills, to act as Lead Technical Engineer to lead high and low level design work for Security Operations Centre solutions delivered to customers. The person undertaking the role will be expected to lead technology designs utilising small teams.Leading the design of a range of security and security related solutions across High level designs, Low level design and Deployment Level Designs, including specification of interfaces between solution components.Support the design and configuration of a range of security toolsSpecify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools.Support the creation and establishment of both cloud hosting and containers, and OnPrem hosted VM's and containers, apply security controls and compliance frameworks.Support the design and configuration of network security devices, network routers and switches, establishment of VLANs, DNS and identity management capabilitySupport deployment of security toolsDevelop test procedures to test solutions meet functional and non-functional requirementsSupport creation and maintenance of requirements and user stories and ensuring that all user stories and requirements are tracked and traceable to solution components.Oversee deployment / implementation activities ensuring that entry criteria are met, all planned activities are completed and that rollback plans are initiated where required.Review and approve all required documentation as part of a release or change including design, deployment, configuration and administration guides.The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures.Develop test procedures to test solutions meet functional and non-functional requirementsGeneralist Technical SME to support deployment and configuration of various tools

Core Duties

Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion.Experience deploying and configuring applications in a performant manner on cloud and / or OnPrem to support high data ingest rates.Proven delivery and experience leading conducting onboarding activities onto a SIEMKnowledge of OnPrem architectures & design including:Security controls and detection tools.Networking and Secure network architecturesUnderstanding of OSI and TCP/IP models.IP addressing, subnetting, and routing protocols.Knowledge of LAN/WAN configurations and network security (ACLs, VLANs).Compute ServicesStorage ServicesUnderstanding of security best practices (least privilege, encryption).Understanding how to design scalable and resilient architectures.OS installation and administrationCybersecurity FundamentalsUnderstanding of common threats (malware, phishing, DDoS) and mitigation techniques.Proficiency in risk assessment and vulnerability management.Security Systems AdministrationExperience managing endpoint security solutions (antivirus, EDR tools).Proficiency in user access control (Active Directory, LDAP).Ability to configure and maintain secure system policies (hardening servers).

Other

Understanding of typical Security Operations Organisation Structures, Policy and Processes.Good knowledge and experience of common Enterprise ICT services.Detailed understanding of threat intelligence and threat actors, TTPs and operationalising threat intelligence.

Reasonable Adjustments

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

TPBN1_UKTJ