Quick overview
Job description
Job Title: Cyber Security Professional
Req ID: 63912
Job Function: Security
Posting Start Date: 02/11/2026
Posting End Date: 11/11/2026
Division: UK Business
Job Location: GBR Belfast - Riverside Tower, GBR Sheffield Endeavour, GBR-London-BTHQ One Braham, GBR-Manchester-New Bailey
Advertised Salary: Competitive + Benefits
Job Req ID: 63912
Posting Date: 02/11/2026
Function: Security
Location: London, Manchester, Sheffield, Belfast
Salary: Competitive + Benefits
About the role
As a Cyber Security Operations Professional, you’ll play a key role in protecting BT and our customers by monitoring, identifying and responding to cyber security threats and incidents.
Based within one of our secure Cyber Security Operations Centres (CySOCs), you’ll monitor real‑time security events, investigate and triage incidents, conduct threat hunting, and support mitigation and remediation activities. You’ll use security dashboards, query languages and scripts to analyse activity, identify potential threats and provide clear remediation advice to customers and internal BT teams.
You’ll work across a range of SIEM and EDR technologies, supporting the development of security content, playbooks and operational processes. You’ll also work closely with customers, vendors and internal teams, building trusted relationships through clear communication, effective collaboration and consistent delivery.
The role requires a strong understanding of cyber security alongside practical knowledge of IT infrastructure, operating systems, firewalls and networking. You’ll also support the introduction and development of new security products and services, using your technical expertise, initiative and judgement to help BT respond to evolving threats and customer requirements.
The successful candidate must be willing to undergo National Security Vetting, including Government Security Clearance (SC) and NPPV levels, which requires residency in the UK for a minimum of five years.
What you’ll be doing
- Responsible for working in a Cyber Security Operation Centre (SOC) environment.
- Responding to security events to SLA and following local operating procedures and playbooks.
- Communicating remediation advice to customers in a standardized, understandable, and high‑quality manner.
- Escalation of high priority incidents involving potential or actual breaches of protective security compliance.
- Utilizes various information system documentation, inspection tools to analyses potential vulnerabilities and identifies mitigation approaches.
- Supports the implementation, development and maintenance of security processes, technology, and controls.
- A strong customer focus – evaluates decisions through the eyes of the customer; builds strong customer relationships and creates customer‑centric processes while promoting BTs core values.
Essential Skills / Experience
- Cyber Security Incident Analysis & Investigation: Ability to analyse, triage, investigate and respond to security events and incidents.
- SIEM & Security Monitoring Experience: Practical experience using SIEM and security monitoring platforms such as Splunk, Sentinel, QRadar, CrowdStrike or LogRhythm.
- Technical Security Knowledge: Good understanding of networking, firewalls, operating systems, cloud technologies and cyber security principles.
Desirable Skills / Experience
- Threat Hunting Experience: Experience proactively identifying malicious activity and emerging threats.
- Endpoint Detection & Response (EDR) Experience: Experience using tools such as CrowdStrike or similar EDR platforms.
- Security Automation & Playbook Development: Experience creating or improving security processes, playbooks and automation.
- Customer & Stakeholder Communication: Ability to communicate technical findings and remediation advice clearly to customers and internal teams.
- Knowledge of Operational Technology (OT) Security: Understanding of OT environments and associated cyber security risks.
- IT Service Management Tool Experience: Experience with tools such as ServiceNow (SNOW) and Jira in a security operations enviroment.
Our Package
- 10% on target annual bonus
- Access to an online private GP 24/7 for you and your immediate family
- Market-leading paid carers leave with up to 2 weeks off
- Equalised maternity, paternity, and adoption leave – 18 weeks’ full pay and 8 weeks’ half pay
- Discounted EE and BT products, including mobile and broadband
- Market leading Pension scheme – 5% from you and 10% from us
- Holiday purchase scheme
- You can select additional benefits, including healthcare, dental, gym memberships and more when you’re ready.
About BT Group
BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.
BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.
Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.
We have a singular culture that unites all our people: we are customer‑first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.
#J-18808-LjbffrSimilar jobs
- HA

Data Analyst - RoyaltiesRecently posted
Harnham · london · Hybrid · Posted 15 Nov 2026 🇬🇧
SQLTableauPower BI+1Technology£60k - £70k/yr - NC

.NET DeveloperRecently posted
Noir Consulting · preston · Hybrid · Posted 15 Nov 2026 🇬🇧
MicroservicesMongoDBSQL+8Technology£35k - £65k/yr - WE
IT Operations Manager (12 month fixed-term contract)Recently posted
Westminster · london · Hybrid · Posted 15 Nov 2026 🇬🇧
Technology£65k - £70k/yr - I3
Data EngineerRecently posted
i3 · United Kingdom · Hybrid · Posted 15 Nov 2026 🇬🇧
SQLT-SQLGit+4TechnologySalary not listed - NR
IT Engineer - M365 projectsRecently posted
Nuvola Resourcing - AI, Data & Software Tech Recruitment Experts · southampton · On-site · Posted 15 Nov 2026 🇬🇧
TechnologySalary not listed - LF
Senior Business Intelligence DeveloperRecently posted
La Fosse · london · Hybrid · Posted 15 Nov 2026 🇬🇧
Stakeholder ManagementTableauAzure+1TechnologySalary not listed - DW

Senior DevOps Engineer (Azure)Recently posted
Digital Waffle · birmingham · Hybrid · Posted 15 Nov 2026 🇬🇧
DockerGitBash+7TechnologySalary not listed - MU

Technical Co-ordinatorRecently posted
Müller UK & Ireland Group · skelmersdale · On-site · Posted 15 Nov 2026 🇬🇧
Microsoft ExcelMicrosoft WordTechnologySalary not listed - QS
Azure Cloud Infrastructure EngineerRecently posted
Queen Square Recruitment · london · Hybrid · Posted 15 Nov 2026 🇬🇧
Stakeholder ManagementAWSSAML+3TechnologySalary not listed - IT

Go backend developer in AI and automationRecently posted
itecopeople · london · Hybrid · Posted 15 Nov 2026 🇬🇧
DockerMicroservicesGit+7Technology£61k/yr - SE

AWS Technical Test Engineer - SC Cleared - Outside IR35Recently posted
Searchability · newcastle upon tyne · Hybrid · Posted 15 Nov 2026 🇬🇧
Stakeholder ManagementJiraAgileTechnologySalary not listed - GL

Data & Digital SolicitorRecently posted
G2 Legal Limited · aberdeen city · Hybrid · Posted 15 Nov 2026 🇬🇧
GDPRTechnologySalary not listed