Job Description

Recruiter: Jayson Coley-Wynters

Salary: Competitive + Benefits + Shift Allowance (Career Grade E)

Hours: Shift patterns 4 days 4 off or Dupont

Locations: Manchester, Sheffield and London

PLEASE NOTE BEFORE APPLYING: Role requires both NPPV3 & SC (security clearance) minumum 5 years UK working history.

About the role

This role exists to provide protective monitoring on BT and customer environments using cyber security solutions and tools such as SIEM, XDR and threat intelligence. The Cyber Security Analyst performs analysis, triage, investigation, threat hunting, mitigation/remediation, and the development and communication of remediation advice to customers and internal BT teams. The role is based from one of our secure CySOCs (Cyber Security Operations Centre) and consists of monitoring real-time events and incidents from our customers, as well threat hunting from reports, dashboards and searches using query languages and scripts.

What you’ll be doing

• Responsible for working in a 24x7 Cyber Security Operation Centre (SOC) environment.
• Responding to security events to SLA and following local operating procedures and play books.
• Communicating remediation advice to customers in a standardised, understandable and high quality manner.
• Handling and responding to reactive customer emails, calls and messages promptly and to an excellent standard.
• Escalation of high priority incidents involving potential or actual breaches of protective security compliance.

Essential Skills / Experience

• Troubleshooting, problem solving and investivigative mindset.
• Documentation creation and following documentation and procedures.
• Collaboration, team work and enthusiasm to share knowledge.
• Communication both with BT’s customers, senior management, peers and other BT support teams. Including verbal, report writing & presentations skills.
• Relevant experience of stakeholder management and good interpersonal skills.
• Good knowledge and experience of Cyber Security tools such as SIEM, XDR, Threat Intelligence Platforms including Splunk, Sentinel, Crowdstrike.
• Good knowledge and experience of TCP/IP, firewalls, DHCP, DNS, LAN/WAN, cloud, containers, servers, endpoints and operating systems.
• Experience with scripting and query languages such as SQL, SPL, KQL, Python, bash and powershell.

Our Package

• Competitive salary and on-target bonus plan
• Flexible and smart working
• Training and development opportunities
• Competitive share options and pension scheme
• Access to discounts on BT & EE products
• 25 days annual leave (not including bank holidays)
• 3 days paid volunteering a year
• Weekly Hours: 37.5
• Salary: Level E
• Position Type: Full-time
• Contract: Permanent

Join us at a pivotal moment for BT Business. We are executing a multi-year transformation to restore growth, modernise at scale and unlock new markets beyond connectivity. Our ambition is clear – return to sustainable revenue and EBITDA growth, strengthen our market position, and deliver meaningful shareholder value through disciplined execution and bold reinvention.

We are fundamentally reshaping the business – simplifying our portfolio, digitising our customer experience and building market-leading capability across cyber, AI and managed services, all powered by the UK’s leading fixed and mobile networks. This is a shift from a legacy connectivity provider to a modern, solutions-led, AI-first business that can truly differentiate in a competitive and fast-moving market.

With execution momentum building and a clear path to growth, the opportunity now is to scale what works, accelerate performance and fully realise our potential. This is about delivering against ambitious financial outcomes while transforming how we operate – creating a business that is simpler, faster, more innovative and easier to do business with.

If you want to be part of the team shaping the turnaround of a multi-billion-pound business – and building a stronger, more competitive BT for the future – this is your moment.