Lead SOC Engineer – SIEM Specialist

About the role

The Lead SOC Engineer – SIEM will head the technical operations of our Security Operations Center, designing SIEM architectures, managing deployments and supporting pre‑sales activities. Reporting to the Senior SOC Engineering & Architecture Manager, you will mentor engineers and ensure the health of multiple SIEM platforms for diverse customers.

Key responsibilities

• Lead design, implementation and ongoing management of SIEM solutions such as Splunk, Microsoft Sentinel, LogRhythm, QRadar and FortiSIEM.
• Maintain and optimise the log collection layer, including CRIBL, to guarantee reliable telemetry.
• Monitor system health, perform regular maintenance and produce operational reports.
• Forecast, track and coordinate SIEM license usage and renewals.
• Define and enforce logging standards across all customer environments.
• Provide technical guidance and mentorship to junior SOC engineers.
• Participate in pre‑sales engagements, delivering technical estimates for SIEM licences and architectures.
• Collaborate with the SOC Engineering & Architecture Manager on strategic initiatives and process improvements.

Required profile

• Minimum 10 years of hands‑on experience with SIEM operations and SOC environments.
• Proven technical leadership in fast‑paced, complex settings.
• Experience in pre‑sales support and license estimation.
• Relevant certifications such as CISSP.

Required skills

• Splunk
• Microsoft Sentinel
• LogRhythm
• QRadar
• FortiSIEM
• CRIBL log collection