Tech Lead – SOC Responder

Colt Technology Services; Leeds; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading technology service provider in the UK is looking for a Tech Lead - SOC Responder to enhance their security operations. This role requires strong incident response experience and knowledge of networking and information security principles. The successful candidate will manage incident response tools, oversee security processes, and contribute to the broader security mission within the organization. Ideal candidates will have 6+ years of related experience and relevant industry certifications.

Benefits

Flexible working hours

Extensive induction program

Opportunities for development

Qualifications

• 6+ years of experience in Information Security Incident Response.
• Strong understanding of enterprise security threats.
• Prior experience in a Security Operations Center is a plus.

Responsibilities

• Manage SIEM and incident response tools, ensuring operational efficiency.
• Analyze possible security incidents to verify legitimacy.
• Establish and oversee security incident response processes.

Skills

Information Security Incident Response

Networking and Systems Experience

Scripting (Python, PowerShell, Unix)

Cyber Security Operations

Communication Skills

Attention to Detail

Education

Degree in Information Technology or Engineering

Tools

SIEM tools

Endpoint Detection and Response (EDR)

Job description

Colt is the New Standard in high bandwidth network and voice services for enterprises and wholesale customers in Europe, Asia and North America’s largest business hubs. With a global reach but a deep local presence, Colt is big enough to deliver and small enough to care.

Why we need this role?

Colt Technology Services SOC is seeking a Tech Lead - SOC Responder. This is an opportunity to meaningfully contribute to a highly visible security operations function with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace.

What you will do :

Support SOC Manager to deliver the following

• SIEM, IR tools platform management including all design, implementation and administration activities , Use cases preparation and implementation, connector deployment, maintenance & health checks
• Responsible for operational activities, Technology escalation support, Security Solution assessment, build activities , existing Service maturing and Build activities assist
• Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach
• Establishing and governing the security incident response processes, investigations and security operational processes.
• Maintenance and enhancement of formal service catalogue, service descriptions, targets and performance against these.
• Ensure security services, tools and platforms are adequately maintained.
• Monitoring of and reporting on the effectiveness of our security enforcing technologies.
• Identification and ongoing monitoring of specific security risks and KPIs and production of management information to ensure Colt receives value from key security investments / services.
• Contribute to design, development and maintenance of security standards and controls.
• Align team's goals and plan with Colt’s long term priorities and strategy.
• Develop and grow the talent and people capability within the security teams.

What We're Looking For?

• 6+ years Information Security Incident Response experience with a focus on detection and response to malicious activity using log data from various sources preferred.
• Strong Networking and Systems experience, preferably in an Enterprise environment
• Strong understanding of Information Security and the threat landscape surrounding enterprise systems.
• Strong Scripting experience (python, powershell, Unix shell)
• Demonstrated experience working in all phases of the SDLC
• Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools.
• Prior SOC experience a plus
• Extensive knowledge of network and server security protocols, technologies, and products.
• Industry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferred
• Strong oral and written communication skills.
• Relentless curiosity and attention to detail
• Ability to learn quickly and leverage prior experiences to effectively solve current security challenges.
• Refusing to accept the status quo
• Degree in Information Technology, Engineering or similar
• SIEM management - Desirable to have some advanced Certification from SIEM vendor on products such as ArcSight , MS Sentinel or Logrhythem

What We Offer You

Looking to make a mark?

At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do.

Instead, we employ people we trust, who come together across the globe to create intelligent solutions.

Our global teams are full of ambitious, driven people, all working together towards one shared purpose : to put the power of the digital universe in the hands of our customers wherever, whenever and however they want.

We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better.

Diversity and inclusion

• Inclusion and valuing diversity of thought and experience are at the heart of our culture here at Colt. From day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation, race, religion, disability, neurodiversity, age, marital status, pregnancy status, or place of birth.

Most Recently We Have

• Signed the UN Women Empowerment Principles which guide our Gender Action Plan
• Trained 60 (and growing) Colties to be Mental Health First Aiders
• Please speak with a member of our recruitment team if you require adjustments to our recruitment process to support you. For more information about our Inclusion and Diversity agenda, visit our DEI pages .

Benefits

Our benefits support you through all parts of life, for both physical and mental health.

• Flexible working hours and the option to work from home.
• Extensive induction program with experienced mentors and buddies.
• Opportunities for further development and educational opportunities.
• Global Family Leave Policy.
• Employee Assistance Program.
• Internal inclusion & diversity employee networks.

A global network

• When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech.