Cyber SOC Analyst (1st line) in Bristol

Part of the reactive 1st line team triaging security events and effectively managing Cyber Security issues. Monitor, analyse and defend against malicious or unusual activity that could be indicative of a security incident or compromise. Support the wider SOC team’s goal to detect, analyse, investigate and respond to cybersecurity incidents using a combination of cutting-edge technology and a strong set of processes. Proactively triaging Intelligence and collaborating with the intelligence domain for reports and tippers. Contribute to continual improvement of BT's capability to operationally exploit tools and data to better protect BT, its business and reputation. To support and maintain the ISO27001 certificate for the SOC that is in scope of the BT Business Support certificate. Responsible for working as part of the 24x7 Security Operation Centre (SOC) environment, covering 12 hr shifts both day and night shifts. Within night shift, accountable for triaging, investigating and carrying out containment actions to defend BT group accordingly. Carrying out correct prioritisation of risk and initiating the call out escalation process where required.

Skills Required for the Role:

• A genuine enthusiasm and drive to work within Cyber Security
• Ability to multi-task, prioritise, and manage time effectively
• Calm & Decisive under pressure: effective at driving calm and effective response to cyber security issues
• Communication, Visual & Written skills: Very strong communication, visual & written skills, Proficient in Microsoft Office Applications
• Drive to learn: ability to learn while on the job and upskill with intense training pathways to be proficient in various security tooling
• Influencing skills: Ability to persuade, influence and motivate others, with the right sense of urgency, without having formal authority
• Building External Relationships: partner relationships with other SOCs (peers, customers and vendors) and National Cyber Security Centre operations
• Basic understanding of security methodologies and processes, and/or networking knowledge
• Knowledge of current real world cyber-attacks and impacts and how this could relate to BT Group
• Understanding of Mitre ATT&CK Framework TTP’s
• Familiarisation with legal frameworks and relevant BT policies governing specialist cyber investigation techniques and evidential standards, understanding how to seek appropriate advice
• Security Clearance: ability to obtain and maintain SC may be needed in the future

Experience Required for the Role:

• Understanding of current Cyber Security threats to our industry & motivation to protect BT from malicious adversaries
• Experience working within a team
• Experience working within an IT/Network/SOC environment (not essential)
• Knowledge of MITRE ATT&CK and its importance
• Understanding of current Cyber Security threats to our industry
• Building process documentation and/or building improvements to current processes
• Typically qualified to degree level, or equivalent professional experience

Benefits:

• At BT, we entertain, educate, and empower millions of people every single day. We’re a brand built on connecting people – whether that’s friends, family, businesses, or communities. Working here, you’ll receive an attractive salary and a range of competitive benefits, but – more than that – you’ll be joining an ambitious organisation with a culture of togetherness, collaboration, and inclusivity, that takes a genuine and proactive interest in your progress and development.
• Competitive salary
• 10% on target bonus
• BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
• 25 days annual leave (not including bank holidays), increasing with service
• Huge range of flexible benefits including cycle to work, healthcare, season ticket loan
• World-class training and development opportunities
• Option to join BT Shares Saving schemes
• Discounted broadband, mobile and TV packages
• Access to 100’s of retail discounts including the BT shop