About this role
Salary: £48,000 - 88,000 per year
Requirements
- Active SC Clearance
- Excellent technical and client-facing skills
- Knowledge and experience designing, building, deploying, and operating SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, and Threat Intelligence
- Experience deploying and configuring applications on cloud and/or on-premises environments to support high data ingest rates
- Proven experience leading and conducting onboarding activities onto a SIEM
- Knowledge of on-premises architectures and design, including security controls, detection tools, networking, secure network architectures, compute services, and storage services
- Understanding of the OSI and TCP/IP models, IP addressing, subnetting, routing protocols, LAN/WAN configurations, and network security, including ACLs and VLANs
- Understanding of security best practices, including least privilege and encryption, and the design of scalable and resilient architectures
- Knowledge of operating system installation and administration
- Understanding of common cyber threats and mitigation techniques, risk assessment, and vulnerability management
- Experience managing endpoint security solutions, such as antivirus and EDR tools
- Proficiency in user access control, including Active Directory and LDAP, and configuring and maintaining secure system policies, such as server hardening
- Understanding of typical Security Operations organisation structures, policies, and processes
- Good knowledge and experience of common enterprise ICT services
- Detailed understanding of threat intelligence, threat actors, TTPs, and operationalising threat intelligence
Responsibilities
- Lead high- and low-level design work for Security Operations Centre solutions delivered to customers, using small teams
- Lead the design of security and security-related solutions, including high-level, low-level, and deployment-level designs, and specify interfaces between solution components
- Support the design and configuration of security tools
- Specify infrastructure requirements for security tools, including RAM, disk, CPU, and network bandwidth
- Support the establishment of cloud-hosted, containerised, and on-premises VM and container environments, and apply security controls and compliance frameworks
- Support the design and configuration of network security devices, routers, and switches, and the establishment of VLANs, DNS, and identity management capabilities
- Support deployment of security tools and provide generalist technical SME support for tool deployment and configuration
- Develop test procedures to verify that solutions meet functional and non-functional requirements
- Support the creation and maintenance of requirements and user stories, ensuring they are tracked and traceable to solution components
- Oversee deployment and implementation activities, ensuring entry criteria are met, planned activities are completed, and rollback plans are initiated when required
- Review and approve documentation required for releases or changes, including design, deployment, configuration, and administration guides
Technologies
- Active Directory
- Cloud
- ICT
- Support
- LAN
- LDAP
- Network
- Security
- TCP/IP
- DevOps
More
This is a Lead Technical Engineer role based in Frimley, five days a week, with a rate of £650–£750. The role is a cyber technical specialist position focused on Cyber Monitoring technologies and cyber threat tools, tactics, techniques, and procedures. We value respect and equality and welcome applicants from all backgrounds and perspectives. Our success is driven by people working in partnership to deliver resourcing solutions for our clients. We can support reasonable adjustments during the recruitment process; applicants can let us know when applying or speak with the recruitment team.
last updated 43 week of 2026