Cyber Security Professional

BT Group; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

10% on target annual bonus

Online private GP 24/7

Pension scheme – employer contribution

Paid carers leave up to 2 weeks

Maternity/paternity/adoption leave

BT product discounts

Holiday purchase scheme

Healthcare and additional benefits

Job summary

BT Group is recruiting a Cyber Security Operations Professional to join one of our secure CySOC centres in London or other UK locations. You will monitor real-time security events, investigate incidents and perform threat hunting, providing clear remediation guidance to BT teams and customers.

You will work with SIEM/EDR tools across multiple platforms, contribute to playbooks, and support the ongoing development of security processes and products.

Qualifications

• Cyber Security Incident Analysis & Investigation: analyse, triage, investigate and respond to events/incidents.
• SIEM & Security Monitoring: practical experience with SIEM platforms such as Splunk, Sentinel, QRadar, CrowdStrike or LogRhythm.
• Technical Security Knowledge: networking, firewalls, OS, cloud technologies and security principles.

Responsibilities

• Operate in a Cyber Security Operation Centre (SOC) environment.
• Respond to security events to SLA and follow playbooks.
• Communicate remediation advice clearly to customers and internal teams.
• Escalate high priority incidents involving breaches of security compliance.
• Analyse vulnerabilities and identify mitigation approaches using system docs and tools.
• Support implementation, development and maintenance of security processes, tech and controls.

Skills

Incident analysis

SIEM monitoring

Networking basics

Operating systems

Security principles

Tools

Splunk

Sentinel

QRadar

CrowdStrike

LogRhythm

Job description

About the role

Location: London, Manchester, Sheffield, Belfast

Salary: Competitive + Benefits

As a Cyber Security Operations Professional, you’ll play a key role in protecting BT and our customers by monitoring, identifying and responding to cyber security threats and incidents.

Based within one of our secure Cyber Security Operations Centres (CySOCs), you’ll monitor real-time security events, investigate and triage incidents, conduct threat hunting, and support mitigation and remediation activities. You’ll use security dashboards, query languages and scripts to analyse activity, identify potential threats and provide clear remediation advice to customers and internal BT teams.

You’ll work across a range of SIEM and EDR technologies, supporting the development of security content, playbooks and operational processes. You’ll also work closely with customers, vendors and internal teams, building trusted relationships through clear communication, effective collaboration and consistent delivery.

The role requires a strong understanding of cyber security alongside practical knowledge of IT infrastructure, operating systems, firewalls and networking. You’ll also support the introduction and development of new security products and services, using your technical expertise, initiative and judgement to help BT respond to evolving threats and customer requirements.

The successful candidate must be willing to undergo National Security Vetting, including Government Security Clearance (SC) and NPPV levels, which requires residency in the UK for a minimum of five years.

What you’ll be doing

• Responsible for working in a Cyber Security Operation Centre (SOC) environment.


• Responding to security events to SLA and following local operating procedures and playbooks.


• Communicating remediation advice to customers in a standardized, understandable, and high-quality manner.


• Escalation of high priority incidents involving potential or actual breaches of protective security compliance.


• Utilizes various information system documentation, inspection tools to analyses potential vulnerabilities and identifies mitigation approaches.


• Supports the implementation, development and maintenance of security processes, technology, and controls.


• A strong customer focus – evaluates decisions through the eyes of the customer; builds strong customer relationships and creates customer‑centric processes while promoting BTs core values.

Essential Skills / Experience

• Cyber Security Incident Analysis & Investigation: Ability to analyse, triage, investigate and respond to security events and incidents.


• SIEM & Security Monitoring Experience: Practical experience using SIEM and security monitoring platforms such as Splunk, Sentinel, QRadar, CrowdStrike or LogRhythm.


• Technical Security Knowledge: Good understanding of networking, firewalls, operating systems, cloud technologies and cyber security principles.

Desirable Skills / Experience

• Threat Hunting Experience: Experience proactively identifying malicious activity and emerging threats.


• Endpoint Detection & Response (EDR) Experience: Experience using tools such as CrowdStrike or similar EDR platforms.


• Security Automation & Playbook Development: Experience creating or improving security processes, playbooks and automation.


• Customer & Stakeholder Communication: Ability to communicate technical findings and remediation advice clearly to customers and internal teams.


• Knowledge of Operational Technology (OT) Security: Understanding of OT environments and associated cyber security risks.


• IT Service Management Tool Experience: Experience with tools such as ServiceNow (SNOW) and Jira in a security operations enviroment.

Our Package

Tailored benefits make a real difference. That’s why we offer a comprehensive range to support your growth, wellbeing, and everyday life. You can design the package to suit you and your lifestyle. Your core benefits include:

• 10% on target annual bonus


• Access to an online private GP 24/7 for you and your immediate family


• Market‑leading paid carers leave with up to 2 weeks off


• Equalised maternity, paternity, and adoption leave – 18 weeks’ full pay and 8 weeks’ half pay


• Discounted EE and BT products, including mobile and broadband


• Market leading Pension scheme – 5% from you and 10% from us


• Holiday purchase scheme

You can select additional benefits, including healthcare, dental, gym memberships and more when you’re ready.

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital‑intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer‑first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.