About this role
Salary: £80,000 - 80,000 per year
Requirements: Strong experience designing, building, deploying and operating SOC technologiesExperience across at least two of the following: SIEM, SOAR, EDR, Vulnerability Management or Threat IntelligenceProven experience producing high-level, low-level and deployment-level technical designsExperience leading technical design activities and small engineering teamsStrong knowledge of SOC technologies such as Splunk, Microsoft Sentinel, Nessus and Microsoft XDRExperience onboarding data sources and services into SIEM platformsAbility to specify infrastructure requirements including compute, storage, memory and network bandwidthExperience deploying applications across cloud, containerised and on-premises environmentsStrong understanding of network architecture, including TCP/IP, routing, switching, VLANs, ACLs, DNS and secure network designGood knowledge of Windows and Linux administrationUnderstanding of scalable and resilient architecture principlesStrong knowledge of security controls, least privilege, encryption and system hardeningExperience with endpoint security, EDR, Active Directory or LDAPUnderstanding of cyber threats, threat actors, TTPs and the operationalisation of threat intelligenceAbility to oversee technical deployments and ensure entry criteria, implementation plans and rollback processes are in placeStrong documentation and stakeholder-facing skills Responsibilities: Take ownership of high-level and low-level technical design across the SOCLead small technical teams supporting the build of the SOCHelp shape, deploy and integrate a broad range of cyber security technologiesDesign and oversee SOC technology architecture across cloud and on-premises environmentsProduce high-level, low-level and deployment-level technical designsLead technical design activities and support technical deployment planningSpecify infrastructure requirements for compute, storage, memory and network bandwidthOversee onboarding of data sources and services into SIEM platformsEnsure entry criteria, implementation plans and rollback processes are in place for deploymentsWork with stakeholders to document and communicate technical designs and deployment plans Technologies: Active DirectoryCloudSupportLDAPLinuxNetworkSecuritySplunkTCP/IPWindowsDevOps More:
We are a leading global technology and cyber organisation building a new Security Operations Centre to support the cyber defence of a major international defence programme. Our SOC will protect a complex mix of Microsoft Cloud services and on-premises data centres operating across multiple regions and classification levels. This is a hybrid role with customer-site attendance near Frimley approximately once every one to two weeks, and London and Frimley are ideal locations, though candidates based elsewhere may be considered where regular travel is manageable. We offer a salary of £72,000 to £82,000, a 10% annual bonus, an excellent benefits package, strong long-term career progression, and the opportunity to play a leading role in building a major new SOC. Candidates must be eligible to obtain SC clearance.
last updated 32 week of 2026