SIEM Software Engineering Lead

BT Group; Southampton; On-site; GBP 70,000 - 100,000; Full time

Job summary

A leading company in telecommunications is seeking a SIEM Software Engineering Lead to oversee the management of Kubernetes clusters, ensure security practices, and collaborate with multiple teams on software delivery. This role requires a strong background in DevOps, significant experience with CI/CD tools, and a drive for continuous improvement in cybersecurity practices. Benefits include extensive support for family leave, health, and professional development opportunities, making it an attractive position for skilled candidates in the industry.

Benefits

25 days annual leave

24/7 private virtual GP appointments

World-class training and development opportunities

Option to join BT Shares Saving schemes

Qualifications

• 5+ years experience in a DevOps role.
• Experience leading a DevOps squad.
• Focus on cybersecurity and team collaboration.

Responsibilities

• Managing Kubernetes clusters and container orchestration.
• Implementing best practices for Kubernetes configuration and security.
• Collaborating with cross-functional teams for software delivery.

Skills

End-to-End Solution Delivery

Containerization Technology

CI/CD Pipeline Tools

Monitoring Tools

Agile Software Development

Strong Communication Skills

Problem-Solving Abilities

Education

Bachelor’s/Master’s degree in Computer Science

Tools

Kubernetes

Gitlab CI

Docker

Elastic Stack (ELK)

JIRA Tools

Job description

Social network you want to login/join with:

SIEM Software Engineering Lead, Southampton

col-narrow-left

Client:

BT Group

Location:

Southampton, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Reference:

3d978f2f4b54

Job Views:

6

Posted:

22.06.2025

Expiry Date:

06.08.2025

col-wide

Job Description:

What you’ll be doing

• Kubernetes DevOps/SysOps Engineering role managing Kubernetes clusters and container orchestration, automating deployment, scaling, and management of containerized applications.
• Implement best practices for Kubernetes configuration and security.
• Configuration, deployment and maintenance of Elastic Stack on Kubernetes (ECK)
• Work with log Collection Tools and Technologies (Beats, Elastic Agent, Logstash), syslog and other data collection protocols
• DevOps/SysOps Engineering collaborating with cross-functional teams (development, operations, and QA) to streamline software delivery and automating deployment pipelines using CI/CD tools
• Troubleshoot issues along the CI/CD pipeline
• Technical leadership working in a high performing team of engineers delivering state of the art security tools for BT.
• Be an active member of the SIEM/CDP log onboarding team, delivering SIEM/CDP functionality in line with the requirements.
• Act as product owner, breaking down top level requirements into product backlogs as part of quarterly/sprint planning
• Lead on several complex technical deliverables ensuring work is completed on time and within budget
• To continually develop professional cyber skills and awareness, to always remain ahead of our attackers, and develop the skills of others in the unit
• To own / provide input into development and implementation of operational, processes policies and procedures, including platform and SecOps processes.
• Proactively drive forward continuous improvement within the team
• To be/become a recognized expert in at least one Cyber technology
• Interface with program and project managers to ensure appropriate security architecture engagement as necessary.
• Provide effective technology coaching and mentoring both inside and outside the team.
• Growth mindset and a desire to learn, teach, and improve skills.
• Previous ownership of mission-critical shared infrastructure

Skills Required for the Role

• End-to-End Solution Delivery: Expertise in taking ownership of a requirement from start to finish, including gathering detailed requirements, designing, and implementing robust, innovative solutions.
• Experience with containerization technology and orchestration platforms e.g. Docker, Kubernetes
• Hands-on experience in installing, configuring, operating, and monitoring CI/CD pipeline tools
• Vast working experience on Gitlab CI or GitHub Actions
• Experience in monitoring tools as Grafana, ELK
• Experience in Agile software development systems and JIRA Tools.
• Understanding IT, network services and security
• Ability to collaborate effectively with others to drive forward key security objectives
• Strong communication skills including presentation and documentation writing (to both technical and business audiences)
• An aptitude for autonomous learning as required by the demands of the business
• Proven problem-solving abilities
• Assertiveness, and the ability to drive through change
• Excellent team working skills including the ability to work effectively within a geographically disparate team

Advantageous:

• SIEM Experience with Elastic Stack (ELK)
• Knowledge of ArgoCD, Terraform
• Knowledge CI/CD tools Ansible, Circle CI, Jenkins, Parker, Terraform
• Knowledge of Offensive testing frameworks
• Knowledge of Linux, Windows and Network Administration
• Knowledge and experience of cloud services (public or private), OpenStack and K8S
• Knowledge of Telecoms Security Act (TSA)
• Knowledge of architectural concepts such as microservices, service mesh.
• Strong knowledge of security policy/regulatory frameworks

Experience Required for the Role

• Bachelor’s/Master’s degree in Computer Science, Information Systems, Engineering, or other related fields
• 5+ years experience in a Dev Ops Role demonstrating ownership of a critical platform
• Experience leading a Dev Ops squad proving oversight and leadership for the members.
• From January 2025, equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It’s for all parents, no matter how your family is made up.
• Enhanced women’s health support: including help with menopause symptoms, cancer screenings, period care and more.
• 25 days annual leave (not including bank holidays), increasing with service
• 24/7 private virtual GP appointments for UK colleagues
• 2 weeks carer’s leave
• World-class training and development opportunities
• Option to join BT Shares Saving schemes.