Director - cyber defence operations

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.

We’re looking for a visionary cybersecurity leader to drive the transformation of our global Security Operations Center. Reporting to the Chief Security Officer, you will architect and scale a next‑generation SOC — advancing incident response, integrating cutting‑edge threat intelligence, and strengthening the systems that protect and sustain our digital operations.

This is an opportunity to build something exceptional and lead a team that redefines how we approach cyber defence and resilience.

• Lead, develop, and inspire a high‑performing team of SOC analysts and engineers.
• Define and implement cyber defence strategies aligned with business priorities and risk posture.
• Act as the senior escalation point for complex security incidents and coordinate cross‑functional responses.

• Integrate advanced threat intelligence into detection and response workflows to identify emerging threats proactively.
• Develop an automated, risk‑based vulnerability management programme to reduce attack surface.
• Collaborate with intelligence‑sharing communities to enhance situational awareness.
• Translate threat intelligence into actionable security measures for stakeholders.

• Oversee monitoring and analysis of network traffic, IDS alerts, and security logs.
• Ensure accurate prioritisation and build high‑fidelity alerting.
• Lead escalation and resolution efforts across internal and external partners.
• Build a proactive threat‑hunting capability and partner with industry experts.

• Enhance security monitoring tools, processes, and detection logic.
• Stay ahead of current vulnerabilities, attack techniques, and countermeasures.
• Ensure thorough documentation of cases, procedures, and investigations.

• Deep understanding of security operations, threat intelligence and incident response frameworks.
• Knowledge of intrusion detection, operating systems (Windows/UNIX), web technologies and telco networks.
• Hands‑on experience developing custom detections and leading threat hunting.
• Familiarity with cloud security operations and automation/orchestration.
• Scripting experience (Python, Power Shell, Node.js, JavaScript) is highly desirable.
• Telecoms experience is a strong advantage.

• Excellent communication skills with the ability to simplify complex concepts.
• Proven experience leading global teams and making decisions in high‑ambiguity environments.
• Strong analytical and problem‑solving skills for complex security challenges.
• Ability to build strong, collaborative relationships across a global organisation.
• A growth mindset — resilient, curious, and solutions‑oriented.

• 8+ years in cybersecurity operations, with at least 3 in a leadership role.
• Experience integrating threat intelligence into SOC workflows.
• Certifications such as CISSP, GIAC or equivalent are a plus.

At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do.

Instead, we employ people we trust, who come together across the globe to create intelligent solutions.

Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want.

We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better.

• Inclusion and valuing diversity of thought and experience are at the heart of our culture here m day one, you’ll be encouraged to be yourself because we believe that’s what helps our people to thrive. We welcome people with diverse backgrounds and experiences, regardless of their gender identity or expression, sexual orientation,…