SOC Analyst

Job Description

Recruiter: Krystle James

Career Grade: E

Internal Closing Date: 28/12/25

Due to the sensitive nature of this role, you will be required to undergo DV (Developed Vetting) level Security Clearance (https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels). An allowance of £5k per annum may be payable monthly while you hold this DV and continue to work in a role that requires that level of security clearance. The terms of this allowance will be made available if you are successful in being recruited into this role.

Security isn’t always the first thing that comes to mind when you think of BT, but when it comes to keeping everyone safely connected, We Are The Protectors. We deal with thousands of cyber-attacks every day, so that millions of people can safely go about their daily lives and run their businesses. We deliver vital work at scale, with real breadth and impact. We connect for good.
You'll be joining a specialist security team that is a trusted partner to governments worldwide, protecting critical national infrastructure and committed to the safety and security of our nation and global communities. Our mission focused work is innovative, inspiring and technologically challenging in a way that makes every day different and stimulating. We provide the opportunity to work on rare projects, with exciting tools and brilliant people. Everyone has access to unparalleled professional and personal development opportunities and your contribution is always valued.

Why this job matters

Our purpose is to use the power of communication to make a better world. For each other, for our customers, for society and our communities.

This role as part of the GSS Security team, providing end-to-end security for GSS and its wider customer base. It helps BT manage its contractual security obligations and contributes to the protection of brand and reputation.

Key Purposes:

• Responsible for the protective monitoring of GSS systems and networks, specifically security information and event management (SIEM).
• Supporting GSS Operational Security and Service Delivery Teams, to ensure they have up-to-date and effective technical security controls.
• Investigation and analysis of incidents.

This job role can be based in Cheltenham or Manchester. Onsite (5 days office based). Monday-Friday 37.5 hours. You must be able to obtain DV Security Clearance in order to start this role. You will need to have lived in the UK for 10 years+ to obtain this.

What you’ll be doing

• Operating within a SOC team to utilise SIEM and available data to pro-actively monitor, identify, analyse, and respond to security threats.
• Incident detection, reporting, initial analysis/investigation, and incident prioritisation, to support the GSS Security Incident Process
• Implementation and support of SIEM configuration - dashboards, rules, alerts, correlations, watchlists, reports etc
• Utilising other security technologies to enhance detection and identification of threats (Firewall, Anti-Virus, EDR/XDR, IDS/IPS)
• Implementation and maintaining of SOC processes (including Playbooks)

Essential Skills

• Data Analysis
• Incident Response
• Incident Management
• Security Assessment
• Cyber Threat Intel

What we'd like to see on your CV

• MANDATORY – Experience in monitoring, identifying and analysis security threats using SIEM tools.
• MANDATORY - Experience in responding to security threats.
• MANDATORY – Experience of working across a wide range of internal and external stake holders to deliver business outcomes.
• MANDATORY - Experience in articulating/implementing a strategic vision

Benefits

• Competitive salary
• 10% on target bonus (Depending on country based)
• BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
• On-call allowance (Depending on requirements of the job role)
• 25 days annual leave (not including bank holidays), increasing with service
• Huge range of flexible benefits including cycle to work, healthcare, season ticket loan
• World-class training and development opportunities
• From January 2025, equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It’s for all parents, no matter how your family is made up.​
• Enhanced women’s health support: including help with menopause symptoms, cancer screenings, period care and more.​
• 24/7 private virtual GP appointments for UK colleagues​
• 2 weeks paid carer’s leave ​
• World-class training and development opportunities​
• Option to join BT Shares Saving schemes.
• Discounted broadband, mobile and TV packages
• Access to 100’s of retail discounts including the BT shop

#LI-Onsite

Security is one of the fastest growing parts of our global organisation. We are protecting our networks from more than 6,500 cyber attacks each day, investing over £40m in research each year - and in employing nearly 3,000 people, we’re also the largest private cyber employer in the UK. With incredible opportunities to learn, develop and grow your skills, we’ll invest in you, nurture your potential and shape your future – whatever your background or experience.

In today’s world, safe and secure digital connections have never been more vital. You’ll be joining a global company operating at the forefront of the information age: BT employs 90,000 people in 180 countries. With huge scale, we’re capable of achieving great things, striving to be personal, simple, and brilliant for our customers whilst creating an inclusive working environment where people from all backgrounds can succeed. Play your part. Make a difference. We are the Protectors.

A FEW POINTS TO NOTE:

Although these roles are listed as full-time, if you’re a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.

We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.

DON'T MEET EVERY SINGLE REQUIREMENT?

Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.