Software Engineering Specialist

We’re looking for an engineer with strong technical fundamentals who enjoys breaking things, understanding how attackers think, and building systems that are secure by default. This is not a penetration tester role and not a compliance role. You will ideally have 2-5 years in software engineering, platform engineering, DevOps, cloud infrastructure, or security engineering. What you’ll be doing

• Design and build secure cloud infrastructure.

• Improve CI/CD pipelines with security built in.
• Automate security testing and policy enforcement.
• Develop internal tooling in Go, Python, TypeScript, or similar.
• Investigate vulnerabilities and work with engineering teams on remediation.
• Perform offensive security exercises against our applications and infrastructure.
• Build detections and preventative controls based on findings.
• Threat model new services before they ship.
• Improve developer experience around secure software delivery.
• Contribute to incident response and post-incident improvements.

Essential Skills / Experience

• Cloud Infrastructure & Platform Engineering (AWS, Kubernetes, Docker), When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Required Cookies These cookies are required to use this website and can’t be turned off. Required Cookies Show More Details Required Cookies Provider Description Enabled SAP as service provider We use the following session cookies, which are all required to enable the website to function:

• “route” is used for session stickiness
• “careerSiteCompanyId” is used to send the request to the correct data centre
• “JSESSIONID” is placed on the visitor’s device during the session so the server can identify the visitor
• “Load balancer cookie” (actual cookie name may vary) prevents a visitor from bouncing from one instance to another

Experience building and supporting secure, scalable cloud infrastructure and platforms. * DevSecOps & CI/CD Security Automation Ability to embed security controls into CI/CD pipelines through automation and policy enforcement. * Application & Infrastructure Security Strong understanding of secure development practices, threat modelling, and vulnerability management. Desirable Skills / Experience

• Linux Administration & Systems Engineering

Strong Linux knowledge with experience supporting and troubleshooting production environments. * Infrastructure as Code (Terraform, Pulumi) Experience automating infrastructure deployment and management using IaC tools. * Software Development & Scripting (Go, Python, TypeScript) Ability to develop tooling and automate processes using modern programming languages. * Networking & Identity Management (OAuth/OIDC, IAM) Understanding of networking, authentication, authorisation, and cloud access controls. * Offensive Security & Security Testing Knowledge of common attack techniques and security testing methodologies. * Security Tooling (Burp Suite, OWASP ZAP, Nmap, Semgrep, Trivy) Experience using security tools to identify vulnerabilities and strengthen security posture. * Observability & Distributed Systems Experience monitoring, troubleshooting and improving visibility across complex systems. * Automation & Security Policy Enforcement Strong automation mindset with experience implementing security controls and guardrails at scale.

Tailored benefits make a real difference. That’s why we offer a comprehensive range to support your growth, wellbeing, and everyday life. You can design the package to suit you and your lifestyle. Your core benefits include:

• 10% on target annual bonus
• Access to an online private GP 24/7 for you and your immediate family
• Market-leading paid carers leave with up to 2 weeks off
• Equalized maternity, paternity, and adoption leave - 18 weeks’ full pay and 8 weeks’ half pay
• Discounted EE and BT products, including mobile and broadband
• Market leading Pension scheme - 5% from you and 10% from us
• Holiday purchase scheme

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands - including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers. BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive. Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next - simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best. We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.