Tech lead - SOC responder

Colt provides network, voice and data centre services to thousands of businesses around the world, allowing them to focus on delivering their business goals instead of the underlying infrastructure.

Why we need this role

We are seeking a Tech Lead - SOC Responder. This is an opportunity to meaningfully contribute to a highly visible security operations function with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. This role operates at a Tier 3 level, with the expectation that the individual has undeniable experience handling major and complex cyber incidents, independently leading and managing incidents end to end, delivering clear and effective stakeholder communication, and mentoring other members of the SOC team.

What you will do Support SOC Manager to deliver the following SIEM, IR tools platform management including all design, implementation and administration activities

Use cases preparation and implementation, connector deployment, maintenance & health checks

Responsible for operational activities, Technology escalation support, Security Solution assessment, existing Service maturing and Build activities assist

Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach

Establishing and governing the security incident response processes, investigations and security operational processes

Maintenance and enhancement of formal service catalogue, service descriptions, targets and performance against these

Ensure security services, tools and platforms are adequately maintained

Monitoring of and reporting on the effectiveness of our security enforcing technologies.

Identification and ongoing monitoring of specific security risks and KPIs and production of management information to ensure Colt receives value from key security investments/services

Contribute to design, development and maintenance of security standards and controls

Align team's goals and plan with Colt’s long term priorities and strategy

Develop and grow the talent and people capability within the security teams

Key performance indicators

Takes ownership for understanding what is expected of them / their team and ensures it is delivered

Proactively requests Leadership for views and opinions; using this feedback to improve personal performance

Reviews working methods regularly to identify ways of improving service delivery – makes recommendations on what improvement can be made and owns delivery of agreed action plan and outcomes

Understands cultural differences and utilises this understanding to build rapport across different teams in order to obtain the necessary cooperation.

What we're looking for Information Security Incident Response experience with a focus on detection and response to malicious activity using log data from various sources preferred

Strong Networking and Systems experience, preferably in an Enterprise environment

Strong understanding of Information Security and the threat landscape surrounding enterprise systems

Strong Scripting experience (python, powershell, Unix shell)
Experience working in all phases of the SDLCDeep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools Prior SOC experience a plus Extensive knowledge of network and server security protocols, technologies, and products

Industry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferred

Strong oral and written communication skills

Relentless curiosity and attention to detail

Ability to learn quickly and leverage prior experiences to effectively solve current security challenges

Refusing to accept the status quoQualifications

Combination of the following:

Degree in Information Technology, Engineering or similarSIEM management - Desirable to have some advanced Certification from SIEM vendor on products such as Arc Sight , MS Sentinel or Logrhythem

What we offer you:

Looking to make a mark?

At Colt, you’ll make a difference. Because…