> Markdown version of [/jobs/ext/1868406-lead-technical-engineer](https://www.wearedevelopers.com/jobs/ext/1868406-lead-technical-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Technical Engineer - **Company:** BAE Systems - **Location:** Guildford, UK (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Antivirus Softwares, JIRA, Microsoft Online Services, Cloud Computing, Cyber Security, Data Centers, Linux, Domain Name System (DNS), Monitoring of Systems, Identity and Access Management, IP Addressing, Subnetting, Network Security, Lightweight Directory Access Protocols (LDAP), Routing, Open Systems Interconnection (OSI), Role-Based Access Control, Phishing, Security Information and Event Management, TCP/IP, Virtual Local Area Networks, Software Vulnerability Management, Wide Area Networks, Network Routers, Diagnostic Tools, Malware, Cyber Threat Analysis, Nessus, Ddos, Splunk, Security Orchestration, Automation & Response - **Published:** August 2, 2026 - **Apply:** https://www.apply4u.co.uk/jobs/x/42653742/ ## About the Role Knowledge and experience of design, build, deployment and operation of SOC technology including at least two of SIEM, SOAR, EDR, Vulnerability Management, Threat Intelligence, to identify signs of an intrusion. Experience deploying and configuring applications in a performant manner on cloud and / or OnPrem to support high data ingest rates. Proven delivery and experience leading conducting onboarding activities onto a SIEM Knowledge of OnPrem architectures & design including: Security controls and detection tools. Networking and Secure network architectures Understanding of OSI and TCP/IP models. IP addressing, subnetting, and routing protocols. Knowledge of LAN/WAN configurations and network security (ACLs, VLANs). Compute Services Storage Services Understanding of security best practices (least privilege, encryption). Understanding how to design scalable and resilient architectures. OS installation and administration (Windows and Linux). Cybersecurity Fundamentals Understanding of common threats (malware, phishing, DDoS) and mitigation techniques. Proficiency in risk assessment and vulnerability management. Security Systems Administration Experience managing endpoint security solutions (antivirus, EDR tools). Proficiency in user access control (Active Directory, LDAP). Ability to configure and maintain secure system policies (hardening servers). Other Understanding of typical Security Operations Organisation Structures, Policy and Processes. Good knowledge and experience of common Enterprise ICT services. Detailed understanding of threat intelligence and threat actors, TTPs and operationalising threat intelligence. ## Description BAE Systems have been contracted to undertake the design and build of a dedicated Security Operations Centre (SOC) to support the cyber defence of a major international defence programme. The information, systems and networks to be protected will be a mix of Microsoft Cloud services and on-premises data centres straddling multiple regions and classification levels. We are looking for a talented and enthusiastic individual with excellent technical and client-facing skills, to act as Lead Technical Engineer to lead high and low level design work for Security Operations Centre solutions delivered to customers. This is a mid level role and the individual will be expected to lead technology designs utilising small teams. Leading the design of a range of security and security related solutions across High level designs, Low level design and Deployment Level Designs, including specification of interfaces between solution components. Support the design and configuration of a range of security tools, such as: Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR and other as appropriate Specify infrastructure requirements (RAM, Disk, CPU, Network bandwidth) for security tools. Support the creation and establishment of both cloud hosting and containers, and OnPrem hosted VM's and containers, apply security controls and compliance frameworks. Support the design and configuration of network security devices, network routers and switches, establishment of VLANs, DNS and identity management capability Support deployment of security tools to both cloud hosting and containers, and OnPrem hosted VM's and containers Develop test procedures to test solutions meet functional and non-functional requirements Support creation and maintenance of requirements and user stories and ensuring that all user stories and requirements are tracked and traceable to solution components. Oversee deployment / implementation activities ensuring that entry criteria are met, all planned activities are completed and that rollback plans are initiated where required. Review and approve all required documentation as part of a release or change including design, deployment, configuration and administration guides. The role is a cyber technical specialist with knowledge of the Cyber Monitoring technologies and cyber threat tools, tactics, techniques and procedures. Develop test procedures to test solutions meet functional and non-functional requirements Generalist Technical SME to support deployment and configuration of various tools including Jira and Cribl ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [WeAreDevelopers LIVE - Chrome for Sale? Comet - the upcoming perplexity browser Stealing and leaking](https://www.wearedevelopers.com/videos/1331-wearedevelopers-live-chrome-for-sale-comet-the-upcoming-perplexity-browser-stealing-and-leaking) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Integrate your Cognitive Assistant with 3rd-party DBs and software](https://www.wearedevelopers.com/videos/249-integrate-your-cognitive-assistant-with-3rd-party-dbs-and-software) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)