> Markdown version of [/jobs/ext/4631042-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/4631042-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst

- **Company:** BT Group
- **Location:** Ipswich, United Kingdom
- **Contract:** Permanent contract
- **Skills:** Data Analysis, Antivirus Softwares, Cyber Security, Monitoring of Systems, Intrusion Detection and Prevention, Intrusion Detection Systems, Security Information and Event Management, Mitre Att&ck, Cyber Threat Analysis, Firewalls (Computer Science)
- **Published:** November 8, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/cyber-security-analyst/55395559

## About the Role

Data Analysis
Incident Response
Incident Management
Security Assessment
Cyber Threat Intel

Desirable Skills / Experience

Strong skills in using security event and log data to identify security threats
Proficient in the use of SIEM technologies for security analysis and investigation. Including
A good working knowledge of the Cyber Threat landscape
A good working knowledge of Incident Management Processes
Using Threat Intelligence to prioritise threats to monitored systems
Understanding and using the MITRE ATT&CK Framework
Working knowledge of end-point security technologies and their management technologies (Anti-virus, EDR, XDR)

## Description

Our purpose is to use the power of communication to make a better world. For each other, for our customers, for society and our communities.
This role is part of the BT Security team, providing end-to-end security for its wider customer base. It helps BT manage its contractual security obligations and contributes to the protection of brand and reputation.
Key Purposes:
*Responsible for the protective monitoring of systems and networks, specifically security information and event management (SIEM).
*Supporting Operational Security and Service Delivery Teams, to ensure they have up-to-date and effective technical security controls.
This job role can be based in Ipswich, Cheltenham, London or Manchester. Due to security requirements, this role requires you to be located on site during your working hours. Mon-Fri 37.5. DV Security Clearance is required. Must have lived in UK for 10+ years to obtain clearance.

What you'll be doing

Operating within a SOC team to utilise SIEM and available data to pro-actively monitor, identify, analyse, and respond to security threats.
Incident detection, reporting, initial analysis/investigation, and incident prioritisation, to support the Security Incident Process
Implementation and support of SIEM configuration - dashboards, rules, alerts, correlations, watchlists, reports etc
Utilising other security technologies to enhance detection and identification of threats (Firewall, Anti-Virus, EDR/XDR, IDS/IPS)
Implementation and maintaining of SOC processes (including Playbooks)