At a Glance
- Tasks: Improve SOC processes and detections, coordinate alert filtering and playbook maintenance.
- Company: Join NCC Group's MXDR SOC team, focusing on enhancing security operations.
- Benefits: Opportunity for mentorship and performance evaluation within a small team.
- Other info: Role involves client engagement across Leeds & Manchester offices.
- Why this job: Lead improvements in SOC efficacy while collaborating with detection engineering teams.
- Qualifications: Experience in SOC team lead roles and relevant certifications like Splunk or CISSP.
The predicted salary is between 60000 - 80000 £ per year.
Requirements
- Experience within a SOC team lead role (Flexible based on experience and technical level)
- Strong people management and leadership skills
- Strong desire to improve and perfect processes, following an overall strategy of excellence (Desirable)
- Experience within any SOC operations role (Desirable)
- Splunk Certified Power/Advanced Power User (Desirable)
- Microsoft SC200 Certified (Desirable)
- Experience working with CI/CD pipelines (Desirable)
- CompTIA Certifications (Security+/ Network+/ Linux+) (Desirable)
- Crest, GIAC or CISSP Certification (Desirable)
- Degree in related field (Desirable)
- Other relevant certifications
What the job involves
- As a SOC Specialist Manager within NCC Groups MXDR SOC, your role is pivotal in improving the efficacy of the current operating SOC. This role focuses on improving the existing processes and detections within the SOC, across all our tech stacks that support the SOC services.
- Co-ordinate the reviews of recommended alert filtering opportunities that have been flagged by analysts and implement filters in detection logic at the appropriate point, liaising with our detection engineering team for efficient filtering to drive down FP rates.
- Co-ordinate the baselining of clients that are being onboarded. Reviewing new clients’ estates, and again applying recommended filters where possible to present an acceptable level of alerting to the relevant SOC Manager prior to go-live date. This is across our MXDR Splunk, Sentinel, EDR, MNIA, MIS, OXM, IDS/IPS and DDoS services.
- Co-ordinate the overarching playbook templates, playbook creation and playbook maintenance for all services supported by the SOC.
- Collaborate with the SOC management team on process alignment, onboarding clients and the standardization of operating playbooks.
- Support the Head of SOC UK in client engagements across our Leeds & Manchester offices, as well as occasional on-site visits to clients when necessary.
- Conduct monthly/half year/yearly performance evaluation and mentorship for a small team of direct reports.
- Regularly update Head of SOC with improvement metrics, as well as advising on the MXDR strategy moving forwards with regards to specific improvements that can be identified in your role.
SOC Security Specialist Manager in Manchester employer: NCC Group
NCC Group offers a dynamic environment for SOC professionals, with opportunities for mentorship and process improvement. Located in Leeds & Manchester, the team focuses on enhancing security operations through collaboration and innovation.
We think you need these skills to ace SOC Security Specialist Manager in Manchester
People Management
Leadership Skills
Process Improvement
SOC Operations Experience
Splunk Certified Power/Advanced Power User
Microsoft SC200 Certified
CI/CD Pipelines Experience
