Recruiter: Carla Ballinger
Hiring Manager: Stewart McDonald
Career Grade: E
Internal Closing Date: 17th February
Security isn’t always the first thing that comes to mind when you think of BT, but when it comes to keeping everyone safely connected, We Are The Protectors. We deal with thousands of cyber-attacks every day, so that millions of people can safely go about their daily lives and run their businesses. We deliver vital work at scale, with real breadth and impact. We connect for good.
This is an opportunity to play your part and protect our company, our customers and our communities from cyberattack. Be part of a dedicated team and get ready to be challenged every day to make the most of your skills and experience. You’ll learn from those around you, and from outstanding training and development resources to become even better at what you do. With the best technology at your fingertips, you'll be part of a friendly and flexible working environment where your contribution is always valued.
About this role
The National Management Centre (NMC) will provide visibility and control of information risks for Policing. It will support the 24x7x365 nature of the police operations, providing a threat detection and response capability for digital services before, during and after cyber-attacks, enabling stakeholders to understand and proactively manage risk across the technology estate at both the national and force level
- Security incidents carry financial cost and can impact our brand and reputation. Proactively preventing, detecting, and responding to incidents allows NMC to reduce risk for PDS.
- Any large organisation needs a centralised facility responsible for every aspect of Security, hardening the business posture from attack.
- This role places real value in finding and adapting ways to protect and support PDS.
- Identification of critical services within forces where loss would negatively impact police operations.
- Awareness of the cyber risks to critical services by continually assessing the threat landscape and informing stakeholders.
- Detecting when, where and how attacks take place.
- Reporting cyber risks to service, executive and operational stakeholders for mitigation decisions.
- Limiting the impact of known cyber risks by engaging forces in pre-incident planning and preparatory activities.
The ability to acquire SC and NPPV3 level clearances is essential for this role
You'll have the following responsibilities
- As a member of the NMC Protective Monitoring team you will respond to immediate security threats on NMC Monitored networks.
- Responsible for working as part of a wider 24x7 Security Operation Center (SOC) environment
- The NMC Protective Monitoring team’s goal is to detect, analyse, investigate and respond to cybersecurity alerts using a combination of cutting-edge technology and a strong set of processes.
- The NMC Protective Monitoring staff work within the NMC, typically with incident response teams to ensure security issues are addressed quickly upon discovery.
- Monitor, analyse and defend against malicious or unusual activity that could be indicative of a security incident or compromise.
Protective Monitoring duties involve
- Initial Triage of alerts – evaluation & detection
- Confirmation of false positive
- Incident data gathering and feedback on any gaps and issues in respect to SIEM Platform Content or tuning opportunities
- Reflect incident severity based on analysis
- Escalate potential incidents to customer or L2/CIMT Team as appropriate
- Regular Performance conversation with BT people manager
- Utilising the My Performance approach and coaching conversations to challenge and develop yourself and others.
You'll have the following skills & experience
- Knowledge of various security methodologies and processes
- Knowledgeable in business strategy and the drivers of organisational performance.
- Knowledge of commonly deployed Cyber Security tools and products
- Knowledge of common Internet protocols and applications
- Knowledge and hands on experience of IP networks and their key components
- Proficient in the use of SIEM technology, in terms of handling alerts, analysis of the data within the alert and rationale on whether escalation or closure is required.
- A genuine enthusiasm and drive to work within Cyber Security
- Motivated and ambitious to work on your own initiative without needing direction
- Strong attention to detail
- Ability to multi-task, prioritise, and manage time effectively
What's in it for you - the benefits
- Discounted BT Broadband, TV & mobile packages and BT products
- On target Bonus
- BT 10% pension contribution
- Professional development and paid for industry certifications/qualifications
- Flexible benefits/rewards including dental insurance, healthcare, gym memberships etc.
- Well-being support for you and your family
- 3 days paid volunteering a year
Security is one of the fastest growing parts of our global organisation. We are protecting our networks from more than 6,500 cyber attacks each day, investing over £40m in research each year - and in employing nearly 3,000 people, we’re also the largest private cyber employer in the UK. With incredible opportunities to learn, develop and grow your skills, we’ll invest in you, nurture your potential and shape your future – whatever your background or experience.
In today’s world, safe and secure digital connections have never been more vital. You’ll be joining a global company operating at the forefront of the information age: BT employs 90,000 people in 180 countries. With huge scale, we’re capable of achieving great things, striving to be personal, simple, and brilliant for our customers whilst creating an inclusive working environment where people from all backgrounds can succeed. Play your part. Make a difference. We are the Protectors