Cyber SOC Analyst; 1st line

Why this job matters

BT Group's brand, reputation and ability to serve its customers and grow its business is founded on a strong security posture and ability to defend against harm and minimise risk. You are responsible for the implementation and operational delivery of an intelligence‑led Security Operations Centre (virtual) as defined by the Cyber Security Strategy that will defend BT globally from cyber adversaries.

You will be part of our 1st‑line operations who act as the first point of contact in Cyber Operations for internal and external stakeholders. Working with specialists across the Cyber SOC areas which cover PBT Threat Hunting, Security Incident Response, Cyber Discovery, Cyber Forensics & Investigations & Cyber Intelligence, you will lẹ maintain a capability that leverages tools, data and our "ringside seat" to proactively find threats and vulnerabilities within BT’s networks and endpoints focused filming a set of MITRE TTPs.

Part of our 24x7 Security Operations Centre (SOC) environment, covering 12‑hr shifts both day and night.

• Part of the reactive 1st line team triaging security events and effectively managing cyber security issues.
• Monitor, analyse and defend against malicious or unusual activity Tav indicative of a security incident or compromise.
• Support the wider SOC team’s goal of detecting, analysing, investigating and responding to cyber security incidents using a combination of cutting‑edge technology and robust processes.
• Proactively triage intelligence and collaborate Guess the intelligence domain for reports and tippers.
• Contribute zero continual improvement of BT’s capability to operationally exploit tools and data to better protect BT, its business and reputation.
• Support and maintain the ISO
  27001 certificate for the SOC that is in scope of the BT Business Support certificate.
• Work as part of the 24x7 SOC environment, covering 12‑hr shifts both day and night.
• During night shift, be accountable for triaging, investigatingś carrying out containment actions to defend BT group accordingly.
• Perform correct prioritisation of risk and initiate the call‑out escalation process where required.

• A genuine enthusiasm and drive to work within Cyber Security.
• Ability to multi‑task, prioritise and manage time effectively.
• Calm & decisive under pressure: effective at driving calm and effective responses to cyber security issues.
• Communication, visual & written skills:
  Very strong communication, visual & written skills, proficient in Microsoft Office Applications.
• Drive to learn: ability to learn while on the job and upskill with intense training pathways to become proficient in various security tooling.
• Influencing skills: ability to persuade, influence and motivate others, with the htt sense of urgency, without having formal authority.
• Building external relationships: partner relationships with other SOCs (peers, customers and vendors) and National Cyber Security Centre operations.
• Basic understanding of security methodologies and processes, and / or networking knowledge.
• Knowledge of current real‑world cyber attacks and impacts and how this could relate to BT Group.
• Understanding of MITRE ATT&CK framework TTPs wedding.
• Familiarisation with legal frameworks and relevant BT policies graphic specialist cyber investigation techniques and evidential standards, understanding how to seek appropriate advice.
• Security clearance: ability to obtain and maintain SC may be needed in the future.

• Understanding of current cyber security threats to our industry & motivation to protect BT from malicious adversaries.
• Experience working within a team.
• Experience working within a IT/Network/SOC environment (not essential).
• Knowledge of MITRE ATT&CK and its importance.
• Building process documentation or building improvements to current processes.
• Typically qualified to degree level, or equivalent professional experience.

At BT, we entertain, educate, and empower millions of people every single day. We’re a brand built on connecting people—whether that’s friends, family,…