Senior Security Engineer - Security Operations Centre (SOC)

Resillion; Birmingham; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Resillion's Security Operations Centre seeks a seasoned Senior Security Engineer to lead security monitoring, incident response, and threat detection. You will manage a distributed SOC team across regions, collaborate with analysts, architects, and account managers, and drive security outcomes.

The role combines hands-on engineering with people leadership, project delivery, and customer engagement, requiring effective communication across technical and non-technical audiences while ensuring

Qualifications

• Proven experience in a senior Security Engineering, SOC, MDR, or Cyber Operations role.
• Experience leading or managing technical teams across multiple locations/time zones.
• Strong knowledge of SIEM platforms, detection engineering, alerting, automation, and SOAR.
• Hands-on security for cloud environments (AWS, Azure, GCP).
• Excellent communication and stakeholder management skills.

Responsibilities

• Provide senior technical leadership across security monitoring, threat detection, incident response, and SOC operations.
• Design, implement, configure, and maintain security technologies supporting SOC services.
• Investigate and resolve complex security incidents and service-related challenges.
• Lead and mentor SOC Analysts/Engineers; manage India-based team and future expansion.
• Develop detection rules, use cases, alerting, and security automation capabilities.
• Ensure SOC service delivery meets KPIs and SLAs; produce technical documentation.

Skills

Senior Security Engineer

Leadership

Incident response

Threat analysis

Cloud security

IAM concepts

Project delivery

Communication

Education

Certifications preferred (CISSP/CISM/GCIH/GCFA/GSEC)

Security certifications (AWS/Azure/GCP)

Degree in Cyber Security/CS/IT

Tools

AWS

Azure

GCP

SIEM

SOAR

Job description

Description

About Resillion

Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

Senior Security Engineer - Security Operations Centre (SOC)

Location: UK / Hybrid (regular overlap with India-based SOC team required)

Reporting To: Head of SOC

Department: Cyber Security - Security Operations Centre (SOC)

Employment Type: Full Time, Permanent

Direct Reports: SOC Analysts and SOC Engineers (India-based team)

About the Role

We are seeking an experienced Senior Security Engineer to join our Security Operations Centre (SOC). This is a senior technical leadership role combining hands-on security engineering, people management, customer engagement, and project delivery.

You will act as a trusted advisor to customers, helping them strengthen their security posture while leading and developing a distributed SOC team across multiple regions. Working closely with security analysts, architects, project teams, account managers and customers, you will ensure security solutions are effectively designed, implemented, operated and continually improved.

This role includes line management responsibility for SOC team members based in India, with the opportunity to support additional international team growth in the future.

Key Responsibilities

Technical Leadership & Security Operations

• Provide senior technical expertise across security monitoring, threat detection, incident response, and SOC operations.
• Design, implement, configure, and maintain security technologies that support SOC services.
• Investigate and resolve complex security incidents, technical issues, and service-related challenges.
• Provide escalation support and technical guidance to SOC Analysts and Engineers.
• Support incident response activities, threat investigations, and forensic analysis where required.
• Develop and maintain detection rules, use cases, alerting mechanisms, and security automation capabilities.
• Review existing security controls and recommend improvements to strengthen customer security environments.

Project Delivery & Service Excellence

• Lead technical workstreams and security projects, ensuring delivery against agreed scope, timelines, quality standards, and budgets.
• Produce and maintain technical documentation, implementation plans, designs, and risk registers.
• Ensure security solutions are documented, monitored, and maintained throughout their lifecycle.
• Manage technical changes in line with agreed change management processes.
• Ensure SOC service delivery meets agreed KPIs, SLAs, and operational commitments.

Team Leadership

• Provide line management, coaching, mentoring, and career development support to SOC team members.
• Conduct regular one-to-one meetings, objective setting, and performance reviews.
• Foster a collaborative, inclusive, and high-performing team culture across multiple locations and time zones.
• Review and quality assure technical output, providing constructive feedback and driving continuous improvement.

Customer & Stakeholder Engagement

• Act as a senior technical point of contact for customers.
• Build trusted customer relationships through service reviews, workshops, technical meetings, and security briefings.
• Present technical findings and security recommendations to both technical and non-technical audiences.
• Collaborate closely with internal teams including Security Operations, Architecture, Infrastructure, Networking, Project Delivery, and Account Management.

Continuous Improvement & Innovation

• Maintain awareness of emerging cyber threats, vulnerabilities, attack techniques, and security technologies.
• Drive continuous improvement across SOC processes, tooling, automation, and operational capabilities.
• Support the transition of new technologies and services into operational support.
• Contribute technical expertise during pre-sales activities, including discovery sessions, technical scoping, and proposals.
• Identify opportunities to deliver additional value for customers through security services and technology improvements.

Skills & Experience

Essential

• Proven experience in a senior Security Engineering, SOC, Managed Detection and Response (MDR), or Cyber Operations role.
• Experience leading or managing technical teams, ideally across multiple locations or time zones.
• Strong knowledge of SIEM platforms, detection engineering, alerting, automation, and SOAR technologies.
• Experience investigating and responding to security incidents and conducting threat analysis.
• Hands-on experience securing cloud environments including AWS, Azure, and/or Google Cloud Platform.
• Strong understanding of identity and access management (IAM) concepts and security best practices.
• Demonstrated project delivery experience, including managing technical requirements, risks, and stakeholder communications.
• Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts to non-technical audiences.
• Strong organisational and problem-solving abilities.

Desirable

• Digital forensics experience.
• Experience supporting enterprise security services within a managed services environment.
• Commercial awareness and participation in customer-facing pre-sales activities.
• Experience working with geographically distributed teams.

Qualifications & Certifications

One or more of the following certifications would be advantageous:

• CISSP
• CISM
• GCIH
• GCFA
• GSEC
• CREST Registered or Certified qualifications
• CompTIA Security+
• Microsoft SC-200 or SC-100
• AWS Security Certification
• Azure Security Certification

A degree in Cyber Security, Computer Science, Information Technology, or a related discipline is desirable, although equivalent professional experience will also be considered.

Additional Information

• Candidates must be eligible to undergo Security Vetting.
• Occasional flexibility in working hours may be required to maintain collaboration with internationally based teams.
• Some travel may be required for customer, team, or business meetings.

Join Resillion and help shape the future of cyber security operations while leading teams, protecting customers, and driving continuous improvement across a fast-paced, global security environment.