Cyber Security Operations & SIEM Specialist

BT Group; Cheltenham; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

10% on target annual bonus

Online private GP 24/7

Paid carers leave (up to 2 weeks)

Maternity/paternity/adoption leave – 9

Discounted BT products

Pension scheme – employer contribution

Holiday purchase scheme

Job summary

BT Group is seeking a Cyber Security Ops Professional to join its security operations team in the UK. The role involves on-site work across multiple locations, including Cheltenham, with DV clearance requirements.

You will monitor security events, analyse threats, and coordinate incident responses while upholding contractual security obligations and protecting BT’s reputation. You will work within a dedicated SOC, implementing SIEM configurations, dashboards, and playbooks, and collaborating

Qualifications

• Data analysis for security monitoring and threat detection.
• Experience with incident response lifecycles and coordination.
• Proficient in incident management processes and post-incident reviews.
• Ability to assess security controls and identify gaps.
• Knowledge of cyber threat intelligence and its application.

Responsibilities

• Operate within a SOC to monitor and respond to security threats using SIEM and related data.
• Perform incident detection, reporting, initial analysis, investigation, and prioritisation to support incident processes.
• Configure and maintain SIEM dashboards, rules, alerts, and reports; manage playbooks.

Skills

Data Analysis

Incident Response

Incident Management

Security Assessment

Cyber Threat Intel

Job description

BT Group is seeking a Cyber Security Ops Professional to join its security operations team in the UK. The role involves on-site work across multiple locations, including Cheltenham, with DV clearance requirements.

You will monitor security events, analyse threats, and coordinate incident responses while upholding contractual security obligations and protecting BT’s reputation. You will work within a dedicated SOC, implementing SIEM configurations, dashboards, and playbooks, and collaborating