SOC Security Specialist Manager

Requirements

• Experience with in a SOC team lead role. (Flexible based on experience and technical level)
• Strong people management and leadership skills
• Strong desire to improve and perfect processes, following an overall strategy of excellence
• (Desirable) Experience with in any SOC operations role
• (Desirable) Splunk Certified Power/Advanced Power User
• (Desirable) Microsoft SC200 Certified
• (Desirable) Experience working with CI/CD pipelines
• (Desirable) CompTIA Certifications (Security+/ Network+/ Linux+)
• (Desirable) Crest, GIAC or CISSP Certification
• (Desirable) Degree in related field
• (Desirable) Other relevant certifications

• As a SOC Specialist Manager within NCC Groups MXDR SOC, your role is pivotal in improving the efficacy of the current operating SOC. This role focusses around improving the existing processes and detections within the SOC, across all our tech stacks that support the SOC services
• Co-ordinate the reviews of recommended alert filtering opportunities that have been flagged by analysts and implement filters in detection logic at the appropriate point, liaising with our detection engineering team for efficient filtering to drive down FP rates
• Co-ordinate the baselining of clients that are being onboarded. Reviewing new clients’ estates, and again applying recommended filters where possible to present an acceptable level of alerting to the relevant SOC Manager prior to go-live date. This is across our MXDR Splunk, Sentinel, EDR, MNIA, MIS, OXM, IDS/IPS and DDoS services
• Co-ordinate the overarching playbook templates, playbook creation and playbook maintenance for all services supported by the SOC
• Collaborate with the SOC management team on process alignment, onboarding clients and the standardization of operating playbooks
• Support the Head of SOC UK in client engagements across our Leeds & Manchester offices, as well as occasional on-site visits to clients when necessary
• Conduct monthly/half year/yearly performance evaluation and mentorship for a small team of direct reports
• Regularly update Head of SOC with improvement metrics, as well as advising on the MXDR strategy moving forwards with regards to specific improvements that can be identified in your role