Lead SOC Architect

BAE Systems Digital Intelligence is seeking a talented and enthusiastic Lead SOC Architect to shape and deliver Security Operations Centre solutions to customers. This senior role is crucial for a dedicated SOC designed to support the cyber defence of a major international defence programme, protecting a mix of Microsoft Cloud services and on-premises data centres across multiple regions and classification levels.

About the Role

As the Lead SOC Architect, you will be responsible for the end-to-end solution architecture of Security Operations Centre (SOC) solutions. This encompasses conceptualisation, architecture, design, build, deployment, and operation. You will work across multiple layers including Services, People, Policy and Processes, Technology, and Physical Infrastructure to meet specific customer requirements.

Key Responsibilities

• Engage with client stakeholders to understand and/or define security requirements, including accreditation requirements.
• Conceptualise and architect SOC solutions, including CONOPS, and contribute to high-level, low-level, and deployment-level designs.
• Support the design of a range of security tools such as Splunk and Sentinel SIEM, Nessus Vulnerability management, Microsoft XDR, and others as appropriate.
• Understand and leverage BAE Systems' experience, IP, and expertise, with support from product and subject matter experts, to deliver secure solutions.
• Assess existing deployments and client capabilities to identify improvements and enhance overall maturity.

Required Experience and Skills

• Knowledge and experience of designing, building, and deploying SOC technology, including at least two of SIEM, SOAR, EDR, Vulnerability Management, or Threat Intelligence.
• Good understanding of industry best practices in Security Operations across all layers (Services, People, Policy and Process, Technology, and Physical).
• Understanding of common threats and mitigation techniques.
• Proficiency in risk assessment and vulnerability management.
• Knowledge of On-Premises architectures and design.
• Understanding of security best practices (least privilege, encryption) and how to design scalable and resilient architectures.
• Knowledge of Cloud security architectures and designs.
• Ability to define and/or understand novel requirements and research potential solutions.
• Familiarity with architectural frameworks (e.g., TOGAF, Zachmann) and modelling.
• Good knowledge and experience of common Enterprise ICT services.
• Experience working with Government systems and senior stakeholders.
• Experience working across a variety of delivery styles (e.g., agile, lean, iterative/incremental, waterfall).

Security Requirements

This role requires a minimum of SC clearance, ideally DV clearance. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions.

Working at BAE Systems

Join BAE Systems and you'll be part of something bigger. We offer a range of hybrid and flexible working arrangements. We are committed to fostering an inclusive culture that values diversity and rewards integrity and merit, empowering you to fulfil your potential. We welcome candidates from all backgrounds and are particularly keen to encourage applications from under-represented groups within our industry.

We also want to ensure our recruitment processes are as inclusive as possible. If you have a disability or health condition that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments.

Embracing Hybrid Working means you and your colleagues may be working in different locations, such as from home, another BAE Systems office or client site, some or all of the time, and work might be going on at different times of the day. By embracing technology, we can interact, collaborate, and create together, even when working remotely.