Tech Lead - SOC Responder

Salary: £66,000 - 106,000 per year

Requirements:

• Information Security Incident Response experience, focusing on detection and response to malicious activity using log data from various sources
• Strong Networking and Systems experience, preferably in an Enterprise environment
• Strong understanding of Information Security and the threat landscape surrounding enterprise systems
• Strong Scripting experience (Python, PowerShell, Unix shell)
• Demonstrated experience working in all phases of the SDLC
• Deep understanding and experience using cybersecurity operations, security monitoring, endpoint (EDR), Network, and SIEM Tools
• Prior SOC experience is a plus
• Extensive knowledge of network and server security protocols, technologies, and products
• Industry recognised certifications (CISSP, GCIH, GCFA, OSCP, etc.) are preferred
• Strong oral and written communication skills
• Relentless curiosity and attention to detail
• Ability to learn quickly and leverage prior experiences to effectively solve current security challenges
• Combination of a relevant degree in Information Technology, Engineering, or similar
• Desirable to have some advanced Certification from SIEM vendor on products such as ArcSight, MS Sentinel, or LogRhythm

Responsibilities:

• Support SOC Manager to deliver SIEM, IR tools platform management including all design, implementation, and administration activities
• Prepare and implement use cases, connector deployment, maintenance & health checks
• Responsible for operational activities, technology escalation support, and security solution assessment
• Analyze potential infrastructure security incidents to determine if they qualify as legitimate security breaches
• Establish and govern the security incident response processes, investigations, and security operational processes
• Maintain and enhance formal service catalogue, service descriptions, targets, and performance against these
• Ensure security services, tools and platforms are adequately maintained
• Monitor and report on the effectiveness of our security enforcing technologies
• Identify and monitor specific security risks and KPIs, producing management information to ensure Colt receives value from key security investments/services
• Contribute to design, development, and maintenance of security standards and controls
• Align teams goals and plans with Colts long‑term priorities and strategy
• Develop and grow the talent and people capability within the security teams
• Take ownership for understanding expected deliverables and ensure they are met
• Proactively seek feedback for personal performance improvement
• Regularly review working methods to identify service delivery improvements

Technologies:

• Support Network
• PowerShell
• Python
• Security
• Unix

At Colt, we provide network, voice, and data centre services to businesses around the world, empowering them to focus on their goals without worrying about underlying infrastructure. We are seeking a Tech Lead - SOC Responder to meaningfully contribute to our highly visible security operations function. This role offers an opportunity to make a global impact within Colt and its partnerships. Our team values diversity and inclusion, encouraging each member to thrive by bringing their unique backgrounds and experiences. We offer flexible working hours, extensive induction programmes, development opportunities, and a commitment to mental health support. Join us and be part of a global network that values empowerment and innovation.