Cyber Security Ops. Specialist

BT Group; Reading; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

DV allowance up to £5k per annum

25 days annual leave

BT pension scheme

World-class training

Flexible benefits

Job summary

BT Group is seeking a security operations professional based near Reading to monitor, detect and respond to security incidents. You will lead incident response activities, perform threat hunting, and develop robust detection rules and playbooks to strengthen security operations.

The role requires DV level security clearance and a commitment to operate on-site, with a comprehensive package including a DV allowance and extensive development opportunities within BT’s security teams.

Qualifications

• Experience in Security Operations Centre (SOC), Cyber Defence, or Incident Response environments.
• Strong knowledge of cyber security frameworks (e.g. MITRE ATT&CK) and defensive controls.
• Hands-on experience with SIEM, EDR/XDR, vulnerability management, and email security technologies.

Responsibilities

• Monitor, analyse, and respond to security alerts and events from SIEM, EDR, NDR, and other security monitoring platforms.
• Act as an incident response lead for cyber security incidents where required, ensuring timely resolution and clear communication with stakeholders.
• Conduct threat hunting to identify emerging threats and weaknesses across the environment(s).
• Develop and maintain security use cases, detection rules, playbooks, and procedures for improved monitoring and response capabilities.
• Integrate threat intelligence into security operations to translate indicators into actionable use cases and responses.
• Mentor and escalate for cyber security analysts, promoting best practices and team development.

Skills

SOC experience

MITRE ATT&CK

SIEM/EDR

Threat hunting

Incident response

Tools

Elasticsearch/Kibana

Jira/Confluence

Job description

Career Grade: D

Due to the sensitive nature of this role, you may be required to undergo DV (Developed Vetting) level Security Clearance (https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels). An allowance of £5k will be payable monthly while you hold this DV and continue to work in a role that requires that level of security clearance. The terms of this allowance will be made available if you are successful in being recruited into this role.

Security isn't always the first thing that comes to mind when you think of BT, but when it comes to keeping everyone safely connected, We Are The Protectors. We deal with thousands of cyber-attacks every day, so that millions of people can safely go about their daily lives and run their businesses. We deliver vital work at scale, with real breadth and impact. We connect for good.
You'll be joining a specialist security team that is a trusted partner to governments worldwide, protecting critical national infrastructure and committed to the safety and security of our nation and global communities. Our mission focused work is innovative, inspiring and technologically challenging in a way that makes every day different and stimulating. We provide the opportunity to work on rare projects, with exciting tools and brilliant people. Everyone has access to unparalleled professional and personal development opportunities and your contribution is always valued.

About the role

Our purpose is to use the power of communication to make a better world. For each other, for our customers, for society and our communities.

• Security incidents carry financial cost and can impact our brand and reputation. Proactively preventing, detecting and responding to incidents allows BT to reduce risk to the business and our customers.
• Any large organisation needs a centralised facility responsible for every aspect of Security, hardening the business posture from attack.
• Your role places real value in finding and adapting ways to protect and support our people, customers & communities.

This job role is based near Reading. On-site, Mon-Fri 37.5. DV Security Clearance is required. Must have lived in UK for 10+ years to obtain clearance.

What you'll be doing

• Monitor, analyse, and respond to security alerts and events from SIEM, EDR, NDR, and other security monitoring platforms.
• Act as an incident repose lead for cyber security incidents where required, ensuring timely resolution and effective communication with technical and non-technical stakeholders.
• Conduct threat hunting activities to proactively identify emerging threats, suspicious behaviours, and potential security weaknesses across the environment(s).
• Develop and maintain security use cases, detection rules, playbooks, and operational procedures to provide continual improvement for security monitoring and response capabilities.
• Integrate threat intelligence into security operations processes, ensuring threat indicators, adversary behaviours, and emerging risks are translated into effective monitoring use cases, detection rules, and response actions.
• Act as a technical mentor and escalation point for cyber security analysts, sharing knowledge, developing team capability, providing continual improvement, and promoting best practices across Security Operations.

Essential Skills / Experience

• Experience in Security Operations Centre (SOC), Cyber Defence, or Incident Response environments.
• Strong knowledge of cyber security frameworks (e.g. MITRE ATT&CK), threats, attack techniques, and defensive controls.
• Hands-on experience with SIEM, EDR/XDR, vulnerability management, and email security technologies.

Desirable Skills / Experience

• Microsoft Security technologies (Microsoft Defender, Sentinel, Entra ID, Purview).
• Elasticsearch, Kibana, Elastic Security and Elastic Defend.
• Darktrace NETWORK
• Atlassian products (including Jira and Confluence).
• CISM, CySA+, CASP+, SC-200, SC-100, or equivalent.

Our Package

• Competitive DV market aligned salaries
• Tiered role based DV allowance of up to £5k per annum paid annually
• World-class training and development opportunities
• Jobs across multiple compass points and multiple customer frameworks giving huge potential to rotate, grow and drive your career
• 10% on target bonus based on grade
• Equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It's for all parents, no matter how your family is made up.
• Enhanced women's health support: including help with menopause symptoms, cancer screenings, period care and more
• BT pension scheme, minimum 5% employee contribution, BT contribution 10%
• New FTSE 100 standard working environments at strategic locations
• Huge range of flexible benefits including an EV salary sacrifice, cycle to work, healthcare, season ticket loan, additional annual leave
• On-call allowance (depending on role requirements)
• Access to 100's of retail discounts including the BT shop
• 24/7 private virtual GP appointments for UK colleagues
• 25 days annual leave (not including bank holidays), increasing with service
• 2 weeks paid carer's leave
• Discounted broadband, mobile and TV packages
• Enhanced life assurances of up to ten times base salary

With over 180 years of heritage, BT Business has brought together our best people and capabilities into a B2B powerhouse serving 1.2 million business customers in the UK

We're a leader for secure connectivity and collaboration platforms for businesses of all shapes and sizes, from big household names and government departments, right through to sole traders and new start-ups. But it's not just the technology that matters, it's what it can do to help them build stronger, smarter, more secure businesses.

We are Customer-First Challengers, who are Committed, Clear and Connected. We value diversity and inclusion and believe in making a positive impact. We connect for good by championing digital inclusion and equipping people, businesses, and communities with digital skills to thrive.

As a member of our team, you will be part of an organisation that celebrates difference, fosters innovation and provides you with opportunities to be your best. With millions of businesses relying on us daily, joining BT means you can be part of a diverse and multi-skilled team that makes a significant impact to society.