Cyber Appliance Management Professional

Why BT?

We’ve always been an organisation with purpose; to use the power of communications to make a better world. You can trace this back to our beginning as pioneers of the world’s first telecommunications company. At our heart we’re a technology company with research and innovation in our bones and a desire to be personal, simple, and brilliant for our customers - those are the values we live by whilst also creating an inclusive working environment where people from all backgrounds can succeed.

Our pursuit of progress over the past 180 years has established BT as a strong, successful brand, with huge scale capable of achieving great things. From supporting emergency services, hospitals, banks and keeping economies around the world online, safe and secure, to delivering large scale technology infrastructure like the creation of BT Sport.

Today in this fast changing, always on, digital world our purpose remains true. Yet the market conditions, regulation and competition we face are tougher than ever before. So if you have the drive, optimism and resilience to help propel us forward we’ll offer unrivalled personal development, a wealth of opportunities to learn, experience new things and pursue new careers. If that’s you and what you’re looking for, we’d love you to be part of our future.

Why Business Unit/Function?

BT International

With customers in 180 countries, we're a leading global business communications provider. We have 17,000 people serving multinational companies, providing the services they need to create the digital transformation of their businesses.

Thanks to our portfolio strategy, Digital Transformation, we provide high-performance, integrated and secure network and IT infrastructure services to global customers. It means our customers can connect easily and securely to the applications and data they need, wherever they are in the world. Our Digital GS strategy we are moving to will help create a better future for GS and our people. With a business focused around a global customer base and a portfolio of scalable repeatable solutions, supported by outstanding customer service and market-leading security.

To deliver it we need to focus where we can be brilliant, be more straightforward to do business with and meet customer needs with greater agility. This will help us to become a more profitable, predictable and customer-focused business.

Why this job matters

We build, maintain, develop and improve centralised security management, monitoring, log & Event ingest and reporting platforms for BT Security SOCs (Security Operations Centres) located globally. The platforms which we manage help our SOC Analysts, Specialists, Implementation Engineers and Designers to deliver the best possible Managed Security Services to our customers.

What I’ll be doing – your accountabilities

• Operational monitoring to resolve any issues reported by monitoring application.
• Maintain the availability, integrity and confidentiality of the security platforms.
• Upgrade, remediate and patch underlying Operating Systems (Windows, Linux, ESXi, firewalls) to maintain the overall platform health.
• Write and update knowledgebase articles.
• Review design documentation to ensure they are accurate, unambiguous and verifiable.
• Conduct vulnerability scans and propose steps for remediation.
• Build and deliver custom applications and resilient systems for the security platform.
• User and groups administration.
• Work across teams to deliver and support of BT Security services features.
• Audit and maintain firewall configurations and policies.
• Support the management of relationships with specific teams, suppliers and stakeholders.

Skills required for the job
MANDATORY:
• Linux Systems Administration, including:
• Install, configure, manage, maintain.
• Excellent written and verbal communications, including documentations skills.
• General IT problem solving and debugging.
• IT troubleshooting. Network troubleshooting. Firewall troubleshooting.
• Familiarity with ticketing and change management process and procedures.
• Ability to learn new technologies without supervision. Self driven learning.

PREFERRED: at least 50%+ of:
• CISSP, CompTia Network+, Security+, CSA+ and/or CEH or equivalent troubleshoot RHEL systems.
• In-depth knowledge of SSH client and server configuration.
• Unix/Linux shell scripting and common tools, including SELinux, FACLs, etc.
• Windows Systems Administration, including:
• Install, configure, manage, maintain, and troubleshoot Windows systems.
• PowerShell.
• Microsoft Active Directory/DNS Administration.
• Microsoft Terminal Server Administration.
• Windows Event Log, and tools such as Winlogbeat, NXLog, Snare, etc.
• Network Administration, including:
• Fortinet Firewalls and VPNs.
• Cisco IOS routers, switches, and fibrechannel.
• Networking protocols and troubleshooting.
• Internet Protocol Version 4.
• Internet Protocol Version 6 (it will take off someday).
• Virtualisation, container orchestration and cloud technologies, including:
• VMware vSphere & ESXi.
• Docker, Kubernetes.
• Proxmox, KVM, QEMU.
• AWS, Azure,
• Fault, vulnerability, and performance monitoring, including: • Opsview, Nagios, Icinga. • Qualys. • Crowdstrike, Wazuh.

• Patch and configuration management and continuous deployment, including:
• Ansible, Foreman.
• Terraform and Packer.
• Version control, e.g., Git.

• Data processing, warehousing, log retention and SIEM
• Elasticsearch/OpenSearch, Logstash, Filebeat, etc.
• Syslog-NG/Rsyslog, Graylog (Preferred)
• Grafana/Prometheus.
• Security Analytics & Correlation.

• Software Engineering skills such as Python, Perl, Java, Go, Regular expressions, etc.

Experience you would be expected to have
MANDATORY
• General IT and security operations knowledge and experience.
• Administration of linux based OS systems
• Knowledge of IP networks and protocols.

SecDevOps Specialist candidate - MANDATORY
• A background in server and application management in a security environment.
• In depth practical experience and knowledge of a range of specific vendor products related to role.
• In depth practical experience and knowledge of operating systems and server administration.

PREFERRED
• ITIL/ITSM (IT Infrastructure Library/Service Management) – IT Operations experience.
• Knowledge of automation tools and methods.
• Extensive experience working in a sensitive commercial environment with demanding SLAs.
• Experience in managing and delivery of bespoke solutions.
• Experience with SIEM (Security Information and Event Management) systems.
• Experience with Analysis & interpretation of data into useful management information.
• Experience with incident management process & procedures.
• Experience with SANs and storage solutions.
• Experience with Atlassian tools like Jira, Confluence, and Bitbucket, and/or SNOW.
• Cloud Platforms, architecture, and design patterns– AWS, Azure.

Connected leaders behaviours
• Customer Champion
• Solution Focused Achiever
• Bold Decision Maker

Key decisions
• Incident communications to relevant parties – How, What, Who?
• Team responsibilities and activities
• Identification of Continuous Improvement opportunities

At BT International, our purpose is to keep the world connected. As part of BT, we build on almost 180 years of innovation and expertise to deliver secure connectivity and digital services to some of the world’s leading multinational businesses and organisations. Our customers trust us to safeguard their data, drive their digital transformation and keep their businesses running. With colleagues on the ground across the world and supporting customers wherever they need to operate, BT International offers a truly global experience. Whether it’s about providing cloud connectivity, helping organisations collaborate, or enabling innovation in cybersecurity and digital services, you’ll be part of a team that shapes how businesses succeed in a world that is being transformed by AI. If you have the drive and ambition to make an impact on a global stage, BT International is where it happens.