Cyber SOC Analyst (1st line)

• Part of the reactive 1st line team triaging security events and effectively managing Cyber Security issues.
• Monitor, analyse and defend against malicious or unusual activity that could be indicative of a security incident or compromise.
• Support the wider SOC team's goal is to detect, analyse, investigate and respond to cybersecurity incidents using a combination of cutting-edge technology and a strong set of processes.
• Proactively triaging Intelligence and collaborating with the intelligence domain for reports and tippers.
• Contribute to continual improvement of BT's capability to operationally exploit tools and data to better Protect BT, its business and reputation.
• To support and maintain the ISO27001 certificate for the SOC that is in scope of the BT Business Support certificate
• Responsible for working as part of the 24x7 Security Operation Centre (SOC) environment, covering 12 hr shifts both day and night shifts.
• Within night shift, accountable for triaging, investigating and carrying out containment actions to defend BT group accordingly.
• Carrying out correct prioritisation of risk and initiation the call out escalation process where required.

• A genuine enthusiasm and drive to work within Cyber Security
• Ability to multi-task, prioritize, and manage time effectively
• Calm & Decisive under pressure: effective at driving calm and effective response to cyber security issues
• Communication, Visual & Written skills: Very strong communication, visual & written skills, Proficient in Microsoft Office Applications
• Drive to learn: ability to learn while on the job and upskill with intense training pathways to be proficient in various security tooling.
• Influencing skills: Ability to persuade, influence and motivate others, with the right sense of urgency, without having formal authority.
• Building External Relationships: partner relationships with other SOCs (peers, customers and vendors) and National Cyber Security Centre operations
• Basic understanding of security methodologies and processes, and/ or networking knowledge.
• knowledge of current real world cyber-attacks and impacts and how this could relate to BT Group.
• Understanding of Mitre ATT&CK Framework TTP's
• Familiarisation with legal frameworks and relevant BT policies governing specialist cyber investigation techniques and evidential standards, understanding how to seek appropriate advice.
• Security Clearance: ability to obtain and maintain SC may be needed in the future., * Understanding of current Cyber Security threats to our industry & motivation to protect BT from malicious adversaries.
• Experience working within a team
• Experience working within a IT/Network/SOC environment (not essential)
• Knowledge of MITRE ATT&CK and its importance
• Understanding of current Cyber Security threats to our industry
• Building process documentation and or building improvements to current processes.
• Typically qualified to degree level, or equivalent professional experience.

At BT, we entertain, educate, and empower millions of people every single day. We're a brand built on connecting people - whether that's friends, family, businesses, or communities. Working here, you'll receive an attractive salary and a range of competitive benefits, but - more than that - you'll be joining an ambitious organisation with a culture of togetherness, collaboration, and inclusivity, that takes a genuine and proactive interest in your progress and development.

• Competitive salary
• 10% on target bonus
• BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
• 25 days annual leave (not including bank holidays), increasing with service
• Huge range of flexible benefits including cycle to work, healthcare, season ticket loan
• World-class training and development opportunities
• Option to join BT Shares Saving schemes.
• Discounted broadband, mobile and TV packages
• Access to 100's of retail discounts including the BT shop