Senior Security Engineer - Security Operations Centre (SOC)
Location: UK / Hybrid (regular overlap with India-based SOC team required)
Reporting To: Head of SOC
Department: Cyber Security - Security Operations Centre (SOC)
Employment Type: Full Time, Permanent
Direct Reports: SOC Analysts and SOC Engineers (India-based team)
About the Role
We are seeking an experienced Senior Security Engineer to join our Security Operations Centre (SOC). This is a senior technical leadership role combining hands-on security engineering, people management, customer engagement, and project delivery.
You will act as a trusted advisor to customers, helping them strengthen their security posture while leading and developing a distributed SOC team across multiple regions. Working closely with security analysts, architects, project teams, account managers and customers, you will ensure security solutions are effectively designed, implemented, operated and continually improved.
This role includes line management responsibility for SOC team members based in India, with the opportunity to support additional international team growth in the future.
Key Responsibilities
Technical Leadership & Security Operations
- Provide senior technical expertise across security monitoring, threat detection, incident response, and SOC operations.
- Design, implement, configure, and maintain security technologies that support SOC services.
- Investigate and resolve complex security incidents, technical issues, and service-related challenges.
- Provide escalation support and technical guidance to SOC Analysts and Engineers.
- Support incident response activities, threat investigations, and forensic analysis where required.
- Develop and maintain detection rules, use cases, alerting mechanisms, and security automation capabilities.
- Review existing security controls and recommend improvements to strengthen customer security environments.
Project Delivery & Service Excellence
- Lead technical workstreams and security projects, ensuring delivery against agreed scope, timelines, quality standards, and budgets.
- Produce and maintain technical documentation, implementation plans, designs, and risk registers.
- Ensure security solutions are documented, monitored, and maintained throughout their lifecycle.
- Manage technical changes in line with agreed change management processes.
- Ensure SOC service delivery meets agreed KPIs, SLAs, and operational commitments.
Team Leadership
- Provide line management, coaching, mentoring, and career development support to SOC team members.
- Conduct regular one-to-one meetings, objective setting, and performance reviews.
- Foster a collaborative, inclusive, and high-performing team culture across multiple locations and time zones.
- Review and quality assure technical output, providing constructive feedback and driving continuous improvement.
Customer & Stakeholder Engagement
- Act as a senior technical point of contact for customers.
- Build trusted customer relationships through service reviews, workshops, technical meetings, and security briefings.
- Present technical findings and security recommendations to both technical and non-technical audiences.
- Collaborate closely with internal teams including Security Operations, Architecture, Infrastructure, Networking, Project Delivery, and Account Management.
Continuous Improvement & Innovation
- Maintain awareness of emerging cyber threats, vulnerabilities, attack techniques, and security technologies.
- Drive continuous improvement across SOC processes, tooling, automation, and operational capabilities.
- Support the transition of new technologies and services into operational support.
- Contribute technical expertise during pre-sales activities, including discovery sessions, technical scoping, and proposals.
- Identify opportunities to deliver additional value for customers through security services and technology improvements.
Skills & Experience
Essential
- Proven experience in a senior Security Engineering, SOC, Managed Detection and Response (MDR), or Cyber Operations role.
- Experience leading or managing technical teams, ideally across multiple locations or time zones.
- Strong knowledge of SIEM platforms, detection engineering, alerting, automation, and SOAR technologies.
- Experience investigating and responding to security incidents and conducting threat analysis.
- Hands-on experience securing cloud environments including AWS, Azure, and/or Google Cloud Platform.
- Strong understanding of identity and access management (IAM) concepts and security best practices.
- Demonstrated project delivery experience, including managing technical requirements, risks, and stakeholder communications.
- Excellent communication and stakeholder management skills, with the ability to explain complex technical concepts to non-technical audiences.
- Strong organisational and problem-solving abilities.
Desirable
- Digital forensics experience.
- Experience supporting enterprise security services within a managed services environment.
- Commercial awareness and participation in customer-facing pre-sales activities.
- Experience working with geographically distributed teams.
Qualifications & Certifications
One or more of the following certifications would be advantageous:
- CISSP
- CISM
- GCIH
- GCFA
- GSEC
- CREST Registered or Certified qualifications
- CompTIA Security+
- Microsoft SC-200 or SC-100
- AWS Security Certification
- Azure Security Certification
A degree in Cyber Security, Computer Science, Information Technology, or a related discipline is desirable, although equivalent professional experience will also be considered.
Additional Information
- Candidates must be eligible to undergo Security Vetting.
- Occasional flexibility in working hours may be required to maintain collaboration with internationally based teams.
- Some travel may be required for customer, team, or business meetings.
Join Resillion and help shape the future of cyber security operations while leading teams, protecting customers, and driving continuous improvement across a fast-paced, global security environment.