> Markdown version of [/jobs/ext/56639-cyber-security-ops-specialist](https://www.wearedevelopers.com/jobs/ext/56639-cyber-security-ops-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Ops. Specialist

- **Company:** BT Group
- **Location:** Cheltenham, UK
- **Salary:** £5,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Intrusion Detection and Prevention, Security Information and Event Management, Cyber Threat Analysis, Cybercrime
- **Published:** May 20, 2026
- **Apply:** https://uk.indeed.com/viewjob?jk=73ee943db75a01df

## About the Role

Do you have experience in SIEM?, * Threat Hunting

 * Intrusion Detection & Analysis
 * Stakeholder Management
 * Incident Management
 * Cyber Threat Intelligence

Desirable Skills / Experience

 * Technical skills: SIEM engineering & optimisation, detection engineering, threat analysis and triage, incident response, threat hunting, and process development & standardisation.
 * Leadership skills: including communication, goal setting and delegation.
 * Negotiation skills: being able to compromise while achieving your team's goals.
 * Planning skills: to organise tasks in the right order, ensuring workloads are at the right level for yourself and your direct reports.
 * Experience: evidence of prior work at senior SOC analyst or team lead.

## Description

You'll be joining a specialist team within Business that is a trusted partner to governments worldwide, protecting critical national infrastructure and committed to the safety and security of our nation and global communities.

Our mission focused work is innovative, inspiring and technologically challenging in a way that makes every day different and stimulating. We provide the opportunity to work on rare projects, with exciting tools and brilliant people. Everyone has access to unparalleled professional and personal development opportunities, and your contribution is always valued.

You will lead, and drive the expansion of, a SOC function within BT Business, which will deliver protective monitoring to various critical missions in the division. You and your direct reports will maintain and create dashboards, searches, rules and alerts in Elastic SIEM, and integrate threat intelligence, to stay ahead of emerging threats. The SOC will be a reassuring, watchful eye over BT's operational environments, enabling other teams to execute their missions with confidence.

This job role can be based in Cheltenham, Ipswich or Manchester. Due to security requirements, this role requires you to be located on site during your working hours. Mon-Fri 37.5. DV Security Clearance is required. Must have lived in UK for 10+ years to obtain clearance.

What you'll be doing

 * Take responsibility for day-to-day security operations across multiple environments, and set your own standards for protective monitoring, agreed with the projects that you will support.
 * Develop and execute a long-term growth strategy for the SOC team, seeking stakeholder input and executive buy-in.
 * Mentor and support direct reports to achieve their developmental goals.
 * Triage, investigate and respond to alerts raised in the SIEM according to customer-specific Operating Models.
 * Regularly communicate with the Divisional Head of Security regarding the effectiveness of your team and progress made towards its growth strategy.


## Related Videos

- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [Forecasting Cyber Attacks with Glassdoor Reviews - Lianne Potter](https://www.wearedevelopers.com/videos/2143-forecasting-cyber-attacks-with-glassdoor-reviews-lianne-potter)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [UK Business Culture and Etiquette](https://www.wearedevelopers.com/magazine/326-uk-business-culture-and-etiquette)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)