Senior Security Engineer – Security Operations Centre (SOC)

Resillion; Birmingham; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Resillion is seeking an experienced Senior Security Engineer to join our Security Operations Centre (SOC). This is a senior technical leadership role combining hands-on security engineering, people management, customer engagement, and project delivery.

You will lead a distributed team across regions, work with analysts, architects, and account managers to design, implement, operate, and continually improve security solutions.

Qualifications

• Senior-level security engineering experience in SOC/MDR or cyber operations.
• Proven ability to lead distributed teams and mentor staff.
• Strong SIEM, SOAR, threat detection, and incident response skills.
• Cloud security experience across AWS, Azure, or GCP.

Responsibilities

• Provide senior technical leadership across security monitoring, threat detection, incident response, and SOC operations.
• Design, implement, configure, and maintain security technologies supporting SOC services.
• Investigate and resolve complex security incidents and service-related challenges.
• Provide escalation support and technical guidance to SOC Analysts and Engineers.
• Support incident response activities, threat investigations, and forensic analysis where required.
• Develop and maintain detection rules, use cases, alerting mechanisms, and security automation capabilities.
• Review existing security controls and recommend improvements to strengthen customer security environments.
• Lead technical workstreams and security projects, ensuring delivery against scope, timelines, budget and quality standards.
• Produce and maintain technical documentation, designs, and risk registers.
• Ensure SOC service delivery meets KPIs and SLAs; manage changes per processes.
• Provide line management, coaching, mentoring, and performance reviews.
• Foster a collaborative, inclusive, high-performing team culture across locations and time zones.
• Review and quality assure technical output; provide constructive feedback and drive improvements.
• Act as senior technical point of contact for customers.
• Build trusted customer relationships through reviews, workshops, and security briefings.
• Present technical findings to both technical and non-technical audiences.
• Collaborate with Security Operations, Architecture, Infrastructure, Networking, Project Delivery, and Account Management teams.
• Maintain awareness of emerging cyber threats and technologies.
• Drive continuous improvement across SOC processes, tooling, automation, and operations.
• Support transitions of new technologies into operational support.
• Contribute to pre-sales activities and security proposals.

Skills

Senior security engineering

People management

Cross-location collaboration

SIEM & SOAR

Threat detection & incident response

Cloud security (AWS/Azure/GCP)

IAM concepts

Project delivery management

Stakeholder communication

Distributed teams across time zones

Education

Degree in Cyber Security/CS/IT

Certifications (CISSP/CISM/GCFA/GCSE)

Tools

AWS

Azure

GCP

SOAR platforms

Job description

Senior Security Engineer - Security Operations Centre (SOC)

Location: UK / Hybrid (regular overlap with India-based SOC team required)

Reporting To: Head of SOC

Department: Cyber Security - Security Operations Centre (SOC)

Employment Type: Full Time, Permanent

Direct Reports: SOC Analysts and SOC Engineers (India-based team)

About Resillion

Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

About the Role

We are seeking an experienced Senior Security Engineer to join our Security Operations Centre (SOC). This is a senior technical leadership role combining hands‑on security engineering, people management, customer engagement, and project delivery.

You will act as a trusted advisor to customers, helping them strengthen their security posture while leading and developing a distributed SOC team across multiple regions. Working closely with security analysts, architects, project teams, account managers and customers, you will ensure security solutions are effectively designed, implemented, operated and continually improved.

This role includes line management responsibility for SOC team members based in India, with the opportunity to support additional international team growth in the future.

Key Responsibilities

Technical Leadership & Security Operations

• Provide senior technical expertise across security monitoring, threat detection, incident response, and SOC operations.
• Design, implement, configure, and maintain security technologies that support SOC services.
• Investigate and resolve complex security incidents, technical issues, and service‑related challenges.
• Provide escalation support and technical guidance to SOC Analysts and Engineers.
• Support incident response activities, threat investigations, and forensic analysis where required.
• Develop and maintain detection rules, use cases, alerting mechanisms, and security automation capabilities.
• Review existing security controls and recommend improvements to strengthen customer security environments.

Project Delivery & Service Excellence

• Lead technical workstreams and security projects, ensuring delivery against agreed scope, timelines, quality standards, and budgets.
• Produce and maintain technical documentation, implementation plans, designs, and risk registers.
• Ensure security solutions are documented, monitored, and maintained throughout their lifecycle.
• Manage technical changes in line with agreed change management processes.
• Ensure SOC service delivery meets agreed KPIs, SLAs, and operational commitments.
• Provide line management, coaching, mentoring, and career development support to SOC team members.
• Conduct regular one‑to‑one meetings, objective setting, and performance reviews.
• Foster a collaborative, inclusive, and high‑performing team culture across multiple locations and time zones.
• Review and quality assure technical output, providing constructive feedback and driving continuous improvement.
• Act as a senior technical point of contact for customers.
• Build trusted customer relationships through service reviews, workshops, technical meetings, and security briefings.
• Present technical findings and security recommendations to both technical and non‑technical audiences.
• Collaborate closely with internal teams including Security Operations, Architecture, Infrastructure, Networking, Project Delivery, and Account Management.
• Maintain awareness of emerging cyber threats, vulnerabilities, attack techniques, and security technologies.
• Drive continuous improvement across SOC processes, tooling, automation, and operational capabilities.
• Support the transition of new technologies and services into operational support.
• Contribute technical expertise during pre‑sales activities, including discovery sessions, technical scoping, and proposals.
• Identify opportunities to deliver additional value for customers through security services and technology improvements.

Skills & Experience

• Proven experience in a senior Security Engineering, SOC, Managed Detection and Response (MDR), or Cyber Operations role.
• Experience leading or managing technical teams, ideally across multiple locations or time zones.
• Strong knowledge of SIEM platforms, detection engineering, alerting, automation, and SOAR technologies.
• Experience investigating and responding to security incidents and conducting threat analysis.
• Hands‑on experience securing cloud environments including AWS, Azure, and/or Google Cloud Platform.
• Strong understanding of identity and access management (IAM) concepts and security best practices.
• Demonstrated project delivery experience, including managing technical requirements, risks, and stakeholder communications.
• Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts to non‑technical audiences.
• Strong organisational and problem‑solving abilities.
• Experience supporting enterprise security services within a managed services environment.
• Commercial awareness and participation in customer‑facing pre‑sales activities.
• Experience working with geographically distributed teams.

Qualifications & Certifications

One or more of the following certifications would be advantageous:

• CISSP
• CISM
• GCIH
• GCFA
• GSEC
• CREST Registered or Certified qualifications
• CompTIA Security+
• Microsoft SC‑200 or SC‑100
• AWS Security Certification
• Azure Security Certification

A degree in Cyber Security, Computer Science, Information Technology, or a related discipline is desirable, although equivalent professional experience will also be considered.

Additional Information

• Candidates must be eligible to undergo Security Vetting.
• Occasional flexibility in working hours may be required to maintain collaboration with internationally based teams.
• Some travel may be required for customer, team, or business meetings.

Join Resillion and help shape the future of cyber security operations while leading teams, protecting customers, and driving continuous improvement across a fast‑paced, global security environment.