James Collinson Email & Phone Number

Salford, Manchester, Gb

Wakefield, West Yorkshire, Gb

London, England, Gb

o Supported and contributed to the development of the 2023 Security Operations strategy.o Designed and executed cyber security table top exercises at tactical and strategic levels.o Developed and implemented improvements to the security incident response strategy and processes.o Met with new customers to onboard them to 10x Security Operations policy, processes and controls.o Participated in the on-call security incident commander rota for major incidents.o Run post incident review activities with a focus on continuous improvement and risk management.o Gathered monthly KPI’s on incident response, security control coverage and risk management to present to the information security steerco.o Identifying opportunities to make improvements to the effectiveness and reliability of 10x incident response whilst maintaining a focus on value for money.o Worked closely with the L1 MSSP to ensure operational excellence and further develop the service.

London, England, Gb

o Management of detection and incident response capabilities for the global William Hill group.o People management, development and mentoring of nine analysts across the UK and Poland.o Recruited as required to meet the resourcing needs of the Security Operations team.o Acted as the working-hours incident commander.o Ran post-mortem activities with both external and internal stakeholders to identify improvements, potential risks and ensure full transparency.o Organised and participated in rotas as both an on-call analyst and incident commander.o Development of incident response plans, SLA’s, policies and playbooks.o Provided triage of and managing the remediation actions for security test findings.o Co-ordinated external purple and red team security testing.o Produced weekly, monthly and quarterly reporting as required by the Information Security Leadership Team and / or the business.o Oversaw the integration and streamlining of Security Operations following multiple mergers and acquisitions.o Provided evidence for and assisted the Governance, Risk and Compliance team with audit responsibilities for PCI DSS, ISO 27001,Gambling Commission (UK), ADM (Italy), DGOJ (Spain) and MGA (Malta).o Oversaw the development of security monitoring and day-to-day incident response for William Hill public cloud environments (AWS).o Management and development of the vulnerability management capability.o Design and execution of the security operations roadmap and subsequent workload of analysts to drive improvements in our incident response capabilities.o Created and delivered targeted training to the Security Operations team and Security Operations Centre.o Lead on the separation of ROW and US Security Operations functions in support of the William Hill acquisition by 888 Holdings Ltd in 2022.o Winners of the SC Security Team of the Year 2020

London, England, Gb

o Triaged, investigated and mitigated escalated information security incidents originating from corporate, data centre and public cloud environments. o Participated in the on-call L2 security analyst rota for 24/7 response to escalated security incidents.o Developed and implemented an AWS based architecture for the protection of all web facing platforms utilising AWS Web Application Firewall, F5 Web Application Firewall, AWS Shield Advanced and AWS CloudFront.o Travelled to the US to be onsite to support the launch of William Hill US covering both incident response and security engineering.o Created new security monitoring cases as a result of environment changes and available threat intelligence.o Supported the implementation of a Security Orchestration and Automation Platform (FortiSOAR).o Development of incident response playbooks and documentation as well as automating incident response processes where appropriate.o Developed our L1 SOC capabilities through the delivery of training, response playbooks and mentoring.

Wakefield, West Yorkshire, Gb

o Investigated ‘pure cybercrime’ and ‘cyber-enabled’ offences across West Yorkshire such as DDoS, Ransomware, Malware and Fraud.o Managed multiple live investigations maintaining a high quality of investigation whilst responsibly managing available force resources.o Trained as a DMI (Digital Media Investigator).o Advised and supported the Homicide and Major Enquiry Team on critical, fast pace investigations to ensure all possible digital lines of enquiry are exploited.o Developed and delivered cyber crime education packages to police officers, police staff and the wider public.o Conducted interviews with the media to promote the work of the Cyber Crime Unit and provide crime prevention advice to the public.

o Research, design and execution of technical operations in support of the UK’s intelligence requirements.o Forged strong cross-departmental relationships to support multi-discipline operations.o Maintain DV (Developed Vetting) Level.o Volunteered to attend local schools and colleges and promote the uptake of STEM subjects in higher education.o Part of the on-site working group, working alongside the Senior Leadership Team on the most important issues facing the workforce.

o Provided technical support to new and existing customers including on-site visits where necessary.o Provisioned and implemented new system installations including the design of custom configurations to suit customer requirements, workflows and integrations.o Visited existing customers on a regular basis to enable maximum success of each customer deployment.