Company description: We are seeking a Tech Lead - SOC Responder. This is an opportunity to meaningfully contribute to a highly visible security operations function with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace.
Below, you will find a complete breakdown of everything required of potential candidates, as well as how to apply Good luck.
Job description: Support SOC Manager to deliver the followingSIEM, IR tools platform management including all design, implementation and administrationactivities, Use cases preparation and implementation, connector deployment, maintenance & health checks
Responsible for operational activities, Technology escalation support, Security Solution assessment, build activities, existing Service maturing and Build activities assist
Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach
Establishing and governing the security incident response processes, investigations and security operational processes.
Maintenance and enhancement of formal service catalogue, service descriptions, targets and performance against these.
Ensure security services, tools and platforms are adequately maintained.
Monitoring of and reporting on the effectiveness of our security enforcing technologies. Identification and ongoing monitoring of specific security risks and KPIs and production of management information to ensure Colt receives value from key security investments/services.
Contribute to design, development and maintenance of security standards and controls.
Align team's goals and plan with Colts long term priorities and strategy.
Develop and grow the talent and people capability within the security teams.
Key Performance Indicators
Takes ownership for understanding what is expected of them / their team and ensures it is delivered2 / 2
Proactively requests Leadership for views and opinions; using this feedback to improve personal performance
Reviews working methods regularly to identify ways of improving service delivery makes recommendations on what improvement can be made and owns delivery of agreed action plan and outcomes
Understands cultural differences and utilises this understanding to build rapport across different teams in order to obtain the necessary cooperation.
Required profile: Information Security Incident Response experience with a focus on detection and response to malicious activity using log data from various sources preferred.
Strong Networking and Systems experience, preferably in an Enterprise environment
Strong understanding of Information Security and the threat landscape surrounding enterprise systems.
Strong Scripting experience (python, powershell, Unix shell)
Demonstrated experience working in all phases of the SDLC
Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools.
Prior SOC experience a plus
Extensive knowledge of network and server security protocols, technologies, and products.
Industry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferred
Strong oral and written communication skills.
Relentless curiosity and attention to detail
Ability to learn quickly and leverage prior experiences to effectively solve current security challenges.
Refusing to accept the status quo
Qualifications
Combination of the following:
Degree in Information Technology, Engineering or similar
SIEM management - Desirable to have some advanced Certification from SIEM vendor on products such as ArcSight, MS Sentinel or Logrhythem
Skills
Network Protocols
Cyber Security Tools/Products
Cyber Security Policy Management
Cyber Security Planning
Cyber Security Risk Management
Education:
A relevant degree such as Computer Science, Information Security or other related field
What we offer: Our benefits support you through all parts of life, for both physical and mental health.
Flexible working hours and the option to work from home.
Extensive induction program with experienced mentors and buddies.
Opportunities for further development and educational opportunities.
Global Family Leave Policy.
Employee Assistance Program.
Internal inclusion & diversity employee networks.
TPBN1_UKTJ