About the role

Security incidents carry financial cost and can impact our brand and reputation. Proactively preventing, detecting and responding to incidents allows BT to reduce risk to the business and our customers. Any large organisation needs a centralised facility responsible for every aspect of Security, hardening the business posture from attack.Your role places real value in finding and adapting ways to protect and support our people, customers & communities.

The Cyber Security Operations team’s goal is to detect, analyse, and respond to cybersecurity incidents using a combination of cutting edge technology and a strong set of processes. Cyber Security Operations staff work across the organisation, typically with incident response teams to ensure security issues are addressed quickly upon discovery.

The Cyber Security Professional (L1) forms the first level of monitoring in the Security Operations Centre. In this role you will monitor and respond to security events and incidents from managed customer security systems as part of a team. The role consists of monitoring realtime events and incidents from our customers, keeping abreast of intelligence from the IT security community (and government/law-enforcement), or other industry sources and operating from 24/7/365 within our Cyber Security Operations Centre (SOC). Shift work will be required to cover 24x7 operations.

What I’ll be doing – your accountabilities

• As a member of the Cyber Security Operations team you will respond to immediate security threats on BT and commercial networks across the globe.
• Responsible for working in a 24x7 Cyber Security Operation Centre environment.
• The Cyber Security Opertaions team’s goal is to detect, analyse, and respond to cybersecurity incidents using a combination of cutting-edge technology and a strong set of processes.
• Cyber Security Operations staff work across the organisation, typically with incident response teams to ensure security issues are addressed quickly upon discovery. Monitor, analyse and defend against malicious or unusual activity that could be indicative of a security incident or compromise.
• Support elements of the Investigation and resolution as required and where necessary report incidents involving potential or actual breaches of protective security compliance.
• Support the operational relationships with specific customers, suppliers and stakeholders, including all Third Parties and joint ventures ensuring the cost-effective provision of a professional Security service.
• Support and maintain the ISO27001 certificate for the CySOC

Skills required for the job

• A basic understanding of the cybersecurity landscape, including emerging risks and security solutions.
• Knowledge of the TCP/IP protocol suite, DHCP, DNS, LAN/WAN, and Operating System concepts.
• Knowledge of the OSI model and security that is associated with each layer.
• Basic network security knowledge to include remote access, DMZ architecture, network monitoring, intrusion detection, and web server security.
• Basic knowledge of security logging tools (log management, SIEM, Advance Security Anomalies Systems.
• Awareness of Threat intelligence. Utilising threat intelligence to make informed decisions to minimise harm to our business and customers.
• Knowledge of at least one security methodology such as MITRE ATT&CK Framework.
• Ability to multi-task, prioritize, and manage time effectively.
• Strong ability to follow documented processes.
• Relevant experience of stakeholder management and good interpersonal skills.

Experience you would be expected to have

• Relevant operational experience, ideally within a Security or Network Operations Centre
• Relevant experience in analysis & interpretation of data into useable and actionable information/intelligence
• Relevant operational knowledge and experience of risk and incident management
• Knowledge of Security management, information security and threat intelligence – experience in the following is desirable: SIEM technologies, network security, malware defence and remediation
• Understanding of threat, offenses, incident detection & response.
• Effective Communication, including verbal, report writing & presentations skills
• Experience in problem solving
• Business acumen and understanding of operational performance

Our Package

Compensation

We believe in open conversations. If selected, salary details will be shared with you ahead of your interview, so you have clarity from the start.

Benefits
• Cafeteria package - HUF 600,000/ year
• Company car / car allowance
• Performance-based bonus
• Comprehensive private health care package for all the employees, which can be extended to family members
• Nursery support for mothers returning from maternity
• Extended paternity leave: 10+10 day fully paid days
• Commuting allowance
• Home office allowance
• Employee discount opportunities
• Highly affordable mobile packages for the family as well

Work atmosphere and community:
• New high-class offices both in Budapest and Debrecen
• Wide-range of company and community programmes (including support for different sport activities)

Flexibility:
• Family-friendly culture
• Smart working approach (hybrid working model, 3 together, 2 wherever)

In case of internal application

In case of internal application please do not forget to inform your line manager about your willingness for the internal move. Please note that the future manager might ask for reference about you from your current line manager. Please also bear in mind that your salary will not be adjusted automatically, but the new Line Manager can request it via off-cycle process.