Tech lead - SOC responder

As Tech Lead - SOC Responder, you will drive enterprise-grade incident response within Colt’s security operations, guiding complex cyber incidents from detection to resolution. You’ll work with cross-functional teams to mature security services and SOPs, while mentoring the SOC team. This role offers global impact and opportunities to shape security monitoring, tooling, and processes. You will lead with practical expertise, delivering clear stakeholder communication and hands-on leadership.

• Flexible working hours and the option to work from home
• Extensive induction program with mentors
• Opportunities for further development and education
• Global Family Leave Policy
• Employee Assistance Program
• Internal inclusion & diversity networks

• Support SOC Manager with design, implementation and administration of SIEM and IR platforms
• Develop and deploy use cases, connectors, and health checks for security tooling
• Manage incident investigations and security process governance
• Maintain service catalog, descriptions, targets, and performance for security services
• Monitor effectiveness of security technologies and report KPIs and value from investments
• Contribute to security standards, controls, and alignment with Colt’s strategy
• Develop and grow talent within the security teams
• Provide operational escalation support and mentor junior team members

• Incident Response experience focused on detection and response using log data
• Strong Networking and Systems experience in an Enterprise environment
• Deep understanding of information security and enterprise threat landscape
• Scripting experience (Python, PowerShell, Unix shell)
• Experience across all phases of the SDLC
• Experience with security operations, monitoring, EDR, Network, and SIEM tools
• Industry certifications (preferred) such as CISSP, GCIH, GCFA, OSCP
• Strong written and oral communication skills
• Curiosity, attention to detail, quick learning ability
• Commitment to challenging the status quo

• Strong communication
• Curiosity
• Attention to detail
• SIEM management
• EDR
• Network and server security