SOC Architect

Our client is one of the most recognised names in digital and technology consultancy — a firm operating at serious scale, with a cyber practice of over 450 specialists in the UK alone, sitting inside a Technology and Transformation business of 7,500 people. You'll be joining a team that's passionate about cyber security, comfortable working at pace, and focused on solving the toughest security challenges facing major organisations today.

The work spans Next-Gen Detection and Response, operating model design, SIEM and SOAR tooling, and everything in between. you'll need deep hands-on experience in security operations architecture, a solid grasp of architecture frameworks like TOGAF, and real-world exposure to SIEM and SOAR platforms.

Working Patterns and location – Hybrid – 2-3 days on site per week

·        Design and continuously improve Next-Gen Detection and Response capabilities for clients.

·        Define architectural blueprints to guide engineers on implementation and tooling.

·        Lead threat detection and response strategies, deciding the best course of action against threats.

·        Develop processes, governance and ways of working to support the target operating model.

·        Collaborate with Engineers and Threat Hunters to analyse dashboard data and drive continuous improvement.

·        Lead migration and implementation strategies and plans for security solutions.

·        Research emerging tools and approaches to keep detection and response capabilities cutting edge.

·        Support clients in evolving their security operating models and refining tooling selection.

·        Strong experience in Security Operations architecture and Next-Gen Detection and Response design.

·        Solid understanding of Security Operations Centres and working within or alongside a SOC.

·        Experience producing High Level Design and Low Level Design documentation for security solutions.

·        Experience working with architecture frameworks, ideally TOGAF.

·        Hands-on experience with multiple SIEM and SOAR platforms, preferably Google SecOps.

·        Experience with EDR, XDR and NDR tooling such as CrowdStrike, Corelight or Microsoft Defender XDR.

·        Experience working across hyperscaler cloud environments.

·        Strong written, verbal and presentation skills — comfortable engaging from end users to board level.

The client would also like to see some of the below, but this is not essential:

·        Experience working within Agile, DevOps or Kanban delivery environments.

·        Professional Cloud Architect Certification from a major hyperscaler provider.

·        Experience in a consultancy or client-facing advisory environment.

·        Relevant cyber security qualifications such as CISSP, CISM or equivalent.

·                  26 days Annual Leave plus Bank Holidays.

·                  Pension contribution matched up to 8%.

·                  Private Medical Insurance.

·                  Overseas Working Policy – If you have the right to work in another country, can request up to 20 days each year to work remotely.

·                  Yearly On Target Bonus.

·                  Season Ticket Loans.

·                  Paid professional subscription.

·                  Life Assurance.

Our client is committed to providing a diverse and inclusive workplace and welcomes applications from all backgrounds.

Part-time opportunities/flexible working is available to suit individual needs.

RECOMMEND A FRIEND: If you have professional friends/colleagues who would be interested in one of our roles and our excellent levels of service too, we'd like to recognise your recommendations with a 'thank you' of our own. For every friend you refer who then starts a role through Datasource either Contract or Permanent, we will send you £200 of Love to Shop Gift Vouchers & gift your friend £100 in Love to Shop Gift Vouchers as well!

You will be required to hold a minimum of SC Clearance. If you do not hold an active SC Clearance, please familiarise yourself with the vetting process before applying.

(c) Copyright Datasource Computer Employment Limited 2026.