Senior Security Engineer – Security Operations Centre (SOC)

Resillion; Birmingham; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Resillion is seeking a Senior Security Engineer to lead the Security Operations Centre (SOC) across multiple regions, coordinating India-based and other international teams. You will guide threat detection, incident response, and security automation while delivering high-quality security services to clients.

You will mentor SOC Analysts and Engineers, drive security improvements, and collaborate with customers, project teams, and account managers to ensure effective, scalable security solutions

Qualifications

• Senior Security Engineer with leadership experience in SOC.
• Experience in MDR or Cyber Operations.
• Strong knowledge of SIEM and SOAR.
• Experience securing cloud environments (AWS/Azure/GCP).
• Excellent communication and stakeholder management.
• Experience managing distributed teams across locations/time zones.

Responsibilities

• Provide senior technical leadership across security monitoring, threat detection, incident response, and SOC operations.
• Design, implement, maintain security technologies and detections.
• Lead technical workstreams and ensure on-time delivery against scope and budgets.
• Mentor and manage SOC Analysts and Engineers.
• Engage with customers and internal teams to articulate security findings.
• Maintain documentation and drive continuous improvement.
• Collaborate with pre-sales activities when required.

Skills

Senior Security Engineer

SOC leadership

MDR / Cyber Ops

SIEM & SOAR

Cloud security

IAM concepts

Project delivery

Communication skills

Education

Degree in Cyber Security / CS / IT

Security certifications desirable

Tools

SIEM

SOAR

AWS

Azure

GCP

Job description

About Resillion

Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

Brief Description

About Resillion Resillion is a global provider of digital assurance, cybersecurity, and testing services. We help organisations strengthen their security posture, protect critical assets, and deliver high-quality digital solutions. Our teams operate across multiple specialist disciplines, including Digital Forensics, Incident Response, SOC Operations, Quality & Compliance, and Technical Consultancy. We are committed to excellence, continuous improvement, and delivering trusted, customer-focused services that meet the highest professional and accreditation standards.

Senior Security Engineer - Security Operations Centre (SOC)

Location

UK / Hybrid (regular overlap with India-based SOC team required)

Reporting To

Head of SOC

Department

Cyber Security - Security Operations Centre (SOC)

Employment Type

Full Time, Permanent

Direct Reports

SOC Analysts and SOC Engineers (India-based team)

About The Role

We are seeking an experienced Senior Security Engineer to join our Security Operations Centre (SOC). This is a senior technical leadership role combining hands‑on security engineering, people management, customer engagement, and project delivery. You will act as a trusted advisor to customers, helping them strengthen their security posture while leading and developing a distributed SOC team across multiple regions. Working closely with security analysts, architects, project teams, account managers and customers, you will ensure security solutions are effectively designed, implemented, operated and continually improved. This role includes line management responsibility for SOC team members based in India, with the opportunity to support additional international team growth in the future.

Key Responsibilities

Technical Leadership & Security Operations

• Provide senior technical expertise across security monitoring, threat detection, incident response, and SOC operations.


• Design, implement, configure, and maintain security technologies that support SOC services.


• Investigate and resolve complex security incidents, technical issues, and service-related challenges.


• Provide escalation support and technical guidance to SOC Analysts and Engineers.


• Support incident response activities, threat investigations, and forensic analysis where required.


• Develop and maintain detection rules, use cases, alerting mechanisms, and security automation capabilities.


• Review existing security controls and recommend improvements to strengthen customer security environments.

Project Delivery & Service Excellence

• Lead technical workstreams and security projects, ensuring delivery against agreed scope, timelines, quality standards, and budgets.


• Produce and maintain technical documentation, implementation plans, designs, and risk registers.


• Ensure security solutions are documented, monitored, and maintained throughout their lifecycle.


• Manage technical changes in line with agreed change management processes.


• Ensure SOC service delivery meets agreed KPIs, SLAs, and operational commitments.

Team Leadership

• Provide line management, coaching, mentoring, and career development support to SOC team members.


• Conduct regular one-to-one meetings, objective setting, and performance reviews.


• Foster a collaborative, inclusive, and high-performing team culture across multiple locations and time zones.


• Review and quality assure technical output, providing constructive feedback and driving continuous improvement.

Customer & Stakeholder Engagement

• Act as a senior technical point of contact for customers.


• Build trusted customer relationships through service reviews, workshops, technical meetings, and security briefings.


• Present technical findings and security recommendations to both technical and non-technical audiences.


• Collaborate closely with internal teams including Security Operations, Architecture, Infrastructure, Networking, Project Delivery, and Account Management.

Continuous Improvement & Innovation

• Maintain awareness of emerging cyber threats, vulnerabilities, attack techniques, and security technologies.


• Drive continuous improvement across SOC processes, tooling, automation, and operational capabilities.


• Support the transition of new technologies and services into operational support.


• Contribute technical expertise during pre-sales activities, including discovery sessions, technical scoping, and proposals.


• Identify opportunities to deliver additional value for customers through security services and technology improvements.

Skills & Experience

• Proven experience in a senior Security Engineering, SOC, Managed Detection and Response (MDR), or Cyber Operations role.


• Experience leading or managing technical teams, ideally across multiple locations or time zones.


• Strong knowledge of SIEM platforms, detection engineering, alerting, automation, and SOAR technologies.


• Experience investigating and responding to security incidents and conducting threat analysis.


• Hands‑on experience securing cloud environments including AWS, Azure, and/or Google Cloud Platform.


• Strong understanding of identity and access management (IAM) concepts and security best practices.


• Demonstrated project delivery experience, including managing technical requirements, risks, and stakeholder communications.


• Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts to non-technical audiences.


• Strong organisational and problem‑solving abilities.

Desirable

• Digital forensics experience.


• Experience supporting enterprise security services within a managed services environment.


• Commercial awareness and participation in customer-facing pre‑sales activities.


• Experience working with geographically distributed teams.

Qualifications & Certifications

One or more of the following certifications would be advantageous:

• CISSP


• CISM


• GCIH


• GCFA


• GSEC


• CREST Registered or Certified qualifications


• CompTIA Security+


• Microsoft SC-200 or SC-100


• AWS Security Certification


• Azure Security Certification

A degree in Cyber Security, Computer Science, Information Technology, or a related discipline is desirable, although equivalent professional experience will also be considered.

Additional Information

• Candidates must be eligible to undergo Security Vetting.


• Occasional flexibility in working hours may be required to maintain collaboration with internationally based teams.


• Some travel may be required for customer, team, or business meetings.

Join Resillion and help shape the future of cyber security operations while leading teams, protecting customers, and driving continuous improvement across a fast-paced, global security environment.