Cyber Security SOC Analyst – Threat Hunting & Response

BT Group; Greater London; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

10% on target annual bonus

Online private GP 24/7

Pension scheme – employer contribution

Paid carers leave up to 2 weeks

Maternity/paternity/adoption leave

BT product discounts

Holiday purchase scheme

Healthcare and additional benefits

Job summary

BT Group is recruiting a Cyber Security Operations Professional to join one of our secure CySOC centres in London or other UK locations. You will monitor real-time security events, investigate incidents and perform threat hunting, providing clear remediation guidance to BT teams and customers.

You will work with SIEM/EDR tools across multiple platforms, contribute to playbooks, and support the ongoing development of security processes and products.

Qualifications

• Cyber Security Incident Analysis & Investigation: analyse, triage, investigate and respond to events/incidents.
• SIEM & Security Monitoring: practical experience with SIEM platforms such as Splunk, Sentinel, QRadar, CrowdStrike or LogRhythm.
• Technical Security Knowledge: networking, firewalls, OS, cloud technologies and security principles.

Responsibilities

• Operate in a Cyber Security Operation Centre (SOC) environment.
• Respond to security events to SLA and follow playbooks.
• Communicate remediation advice clearly to customers and internal teams.
• Escalate high priority incidents involving breaches of security compliance.
• Analyse vulnerabilities and identify mitigation approaches using system docs and tools.
• Support implementation, development and maintenance of security processes, tech and controls.

Skills

Incident analysis

SIEM monitoring

Networking basics

Operating systems

Security principles

Tools

Splunk

Sentinel

QRadar

CrowdStrike

LogRhythm

Job description

BT Group is recruiting a Cyber Security Operations Professional to join one of our secure CySOC centres in London or other UK locations. You will monitor real-time security events, investigate incidents and perform threat hunting, providing clear remediation guidance to BT teams and customers.

You will work with SIEM/EDR tools across multiple platforms, contribute to playbooks, and support the ongoing development of security processes and products.