Threat Hunting Specialist

Why this job matters

BT Group is one of the most critical of all UK Critical National Infrastructure. 
Our job is simple -  defend it from Cyber Attack. 
Your role at BT is pivotal in helping us achieve this. You will have access to an unparalleled level of data and security tooling to help us achieve our goal of being the world’s most trusted connector of people, devices and machine by 2030. 

This role follows hybrid working ( 3 days in office) & can be based in any of the following: Birmingham/Manchester/London/Bristol/Sheffield. Eligbility for SC Clearance is also advantageous

What you’ll be doing

• Conduct proactive threat hunting activities to identify and mitigate potential security threats. Aligning with the MITRE ATT&CK Framework to put at the core of threat hunting activities. 
• Analyse and interpret security data from various sources, including logs, network traffic, and endpoint data.
• Develop and implement advanced threat detection techniques and tools.
• Collaborate with the incident response team to investigate and respond to security incidents.
• Create and maintain detailed documentation of threat hunting activities and findings.
• Stay up-to-date with the latest threat intelligence and cybersecurity trends.
• Provide recommendations for improving security posture and threat detection capabilities.
• Lead an intelligence-led vulnerability management process.
• Domain knowledge to fill the role of CTI SME within wide range of Security engagements.
• Leading collaboration activities with internal teams across the organisation in order to provide further internal understanding of potential adversaries and attack vectors.
• Delivery of verbal presentations and threat briefs, in-person and virtually, to internal and external stakeholders at all seniority levels
• Relationship management within the wider Information Security community. Representation of BT in a wide range of fore, to ensure impactful collaboration across the Telco and National Security communities including direct engagement with NCSC and the NCA.
• Ownership of Vendor relationships - ensuring effective integration and usage of vendor platforms, in order to drive best value and effect for BT.

Skills & Experience Required for the Role

Must Have

• Proven experience in threat hunting, incident response, or a similar role.
• Holds current relevant professional qualifications in Threat Hunting and/or Information Security (Relevant certifications (e.g., CEH, GCIH, GCFA) are a plus– or willing to work towards
• Strong knowledge of cybersecurity principles, threat landscapes, and attack vectors.
• Experience with Crowdstrike and Microsoft Defender hunting methodologies
• Familiarity with the MITRE ATT&CK framework.
• Knowledge of security tools and technologies such as SIEM, EDR, and IDS/IPS.
• Excellent analytical and problem-solving skills.
• Strong oral and written communication skills
• Proactive Team Player
• Demonstrable experience of operational delivery in a fast-paced security environment
• Knowledge and understanding of current security threats, threat models, frameworks and common mitigations
• People skills, with an ability to communicate effectively 

Nice to Have

• Experience of intelligence-led vulnerability management processes.
• Experience with scripting and automation (e.g., Python, PowerShell).
• Experience within another Telecommunications/CNI environment
• Good written reporting skills
• Management/Leadership experience 
• Network analysis skills

Security Skills 

• Threat Hunting
• Intrusion Detection and Analysis
• Threat Detection Engineering
• Data Analysis
• Threat Intelligence, Assessment, and Threat Modelling
• Technical Reporting
• Reporting
• Security Assessment 
• Incident Management
• Stakeholder Management 
• Customer Relationship Management 
• Escalation Management 

Benefits

At BT, we entertain, educate, and empower millions of people every single day. We’re a brand built on connecting people – whether that’s friends, family, businesses, or communities. Working here, you’ll receive an attractive salary and a range of competitive benefits, but – more than that – you’ll be joining an ambitious organisation with a culture of togetherness, collaboration, and inclusivity, that takes a genuine and proactive interest in your progress and development.

• Competitive salary
• 10% on target bonus
• BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
• 25 days annual leave (not including bank holidays), increasing with service
• Huge range of flexible benefits including cycle to work, healthcare, season ticket loan
• World-class training and development opportunities
• Option to join BT Shares Saving schemes.
• Discounted broadband, mobile and TV packages
• Access to 100’s of retail discounts including the BT shop