SOC Tech Lead: Incident Response & SIEM Architect (Remote)

Colt; City of London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading telecommunications company is seeking a Tech Lead – SOC Responder to oversee security operations and incident response. In this role, you will manage security services, analyze incidents, and enhance security processes. Ideal candidates possess strong cybersecurity skills and experience with SIEM tools. This full-time position is based in London and offers a dynamic work environment with a commitment to diversity and employee development.

Benefits

Flexible working hours and remote work options

Extensive induction program with mentors

Opportunities for further development and education

Global family leave policy

Employee assistance program

Qualifications

• Information Security Incident Response experience focusing on detection and response using log data.
• Strong networking and systems experience in an enterprise environment.
• In‑depth understanding of information security and the threat landscape.
• Strong scripting skills in Python, PowerShell, Unix shell.
• Deep knowledge of cyber security operations, monitoring, endpoint (EDR), network and SIEM tools.

Responsibilities

• Support SOC Manager to deliver SIEM and IR tools management.
• Operate technology escalation support and security solution assessment.
• Analyze infrastructure security incidents for legitimate breaches.
• Establish security incident response processes and investigations.
• Monitor and report on effectiveness of security technologies.

Skills

Network protocols

Cyber security tools and products

Cyber security policy management

Cyber security planning

Cyber security risk management

Education

Degree in Information Technology, Engineering or related field

SIEM management experience

Job description

A leading telecommunications company is seeking a Tech Lead – SOC Responder to oversee security operations and incident response. In this role, you will manage security services, analyze incidents, and enhance security processes. Ideal candidates possess strong cybersecurity skills and experience with SIEM tools. This full-time position is based in London and offers a dynamic work environment with a commitment to diversity and employee development.