Tech Lead - SOC Responder

Salary: £61,000 - 101,000 per year

Requirements:

• Information Security Incident Response experience with a focus on detection and response to malicious activity using log data from various sources preferred
• Strong networking and systems experience, preferably in an enterprise environment
• Strong understanding of information security and the threat landscape surrounding enterprise systems
• Strong scripting experience in Python, PowerShell, or Unix shell
• Experience working in all phases of the SDLC
• Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), network, and SIEM tools
• Prior SOC experience a plus
• Extensive knowledge of network and server security protocols, technologies, and products
• Industry-recognized certifications such as CISSP, GCIH, GCFA, or OSCP preferred
• Strong oral and written communication skills
• Relentless curiosity and attention to detail
• Ability to learn quickly and leverage prior experience to solve current security challenges
• Degree in Information Technology, Engineering, or similar
• SIEM management experience desirable, with advanced certification from a SIEM vendor such as ArcSight, MS Sentinel, or LogRhythm

Responsibilities:

• Support our SOC Manager in delivering SIEM and IR tools platform management, including design, implementation, and administration activities
• Prepare and implement use cases, deploy connectors, and perform maintenance and health checks
• Support operational activities, technology escalation, security solution assessment, service maturing, and build activities
• Analyse potential infrastructure security incidents to determine whether they qualify as legitimate security breaches
• Establish and govern security incident response processes, investigations, and security operational processes
• Maintain and enhance the formal service catalogue, service descriptions, targets, and performance measures
• Ensure our security services, tools, and platforms are adequately maintained
• Monitor and report on the effectiveness of our security enforcing technologies
• Identify and monitor specific security risks and KPIs, and produce management information to demonstrate value from key security investments and services
• Contribute to the design, development, and maintenance of security standards and controls
• Align our teams goals and plans with our long-term priorities and strategy
• Develop and grow talent and people capability within our security teams
• Take ownership of expectations for our team and ensure delivery
• Proactively seek leadership feedback and use it to improve performance
• Review working methods regularly and recommend service improvements, owning agreed actions and outcomes
• Build rapport across teams by understanding cultural differences and encouraging cooperation

Technologies:

• Support
• Network
• PowerShell
• Python
• Security
• Unix

More:

hackajob is partnering directly with Colt Technology Services to hire for this role. Colt provides network, voice, and data centre services to thousands of businesses around the world, helping them focus on delivering their business goals instead of the underlying infrastructure. This is a Tech Lead - SOC Responder role at Tier 3 level, contributing to a highly visible security operations function with global impact across Colt, business units, partners, and customers. We offer flexible working hours, the option to work from home, an extensive induction program with experienced mentors and buddies, opportunities for further development and educational opportunities, a Global Family Leave Policy, an Employee Assistance Program, and internal inclusion and diversity employee networks. We also promote diversity of thought and experience, support adjustments to the recruitment process where needed, and offer a global network where colleagues can make a difference and help shape intelligent solutions.

last updated 39 week of 2026