Security isn’t always the first thing that comes to mind when you think of BT, but when it comes to keeping everyone safely connected, We Are The Protectors. We deal with thousands of cyber-attacks every day, so that millions of people can safely go about their daily lives and run their businesses. We deliver vital work at scale, with real breadth and impact. We connect for good.

About This Role

You’ll be joining a specialist security team that is a trusted partner to governments worldwide, protecting critical national infrastructure and committed to the safety and security of our nation and global communities. Our mission focused work is innovative, inspiring and technologically challenging in a way that makes every day different and stimulating. We provide the opportunity to work on rare projects, with exciting tools and brilliant people. Everyone has access to unparalleled professional and personal development opportunities and your contribution is always valued.

Our team maintain and develop a big data cyber monitoring platform which ensures the information security for one of our major customers. Comprised of Elasticsearch, Logstash and Kibana, built on a large remote Linux estate, the platform supports a suite of tools for storing, enriching, querying and visualising large amounts of data. The requirements can change at short notice, so the team uses a DevOps methodology to react to these changes and continue to provide the best customer service.

In this role you will be a key driver in improving our customer’s cyber capability. The customer will look to you as a technical expert for a range of activities and you will have the opportunity to develop your skills in many areas. You will be a self-motivated individual, with the ability to make changes that improve our services and will be involved in short-, medium- and long-term strategy for this customer and wider BT security policy.
This role is a unique and exciting opportunity to work in a challenging environment where you can bring your own experience and expertise to make a difference to our customers. In return you’ll learn from a highly skilled team and develop your skills in big data applications and cybersecurity toolsets.
Working 37.5 hours a week, Monday to Friday within our core operating hours of 08.00 – 17.00, there is local flexibility on start/finish times, with some of your time spent on our local customer site.
You will be expected to obtain and maintain a UKIC DV clearance, so if you don’t currently have one, we will need to undertake pre-security checks before starting the role with us.

You’ll Have The Following Responsibilities
Your Primary role will be working in a sub team on Capability Development. A core aspect of this will developing Kibana Plugins using JavaScript frameworks to extend / enhance Kibana and Elastic Search core functionality for bespoke use cases. This will involve Front-End development in Angular or React JavaScript Frameworks and Back-End development in node.js.
Secondary roles include working with experts to understand data ingested into the Cyber Platform. This can lead on to mixture of configuring and modifying processing tooling to optimise the platform and introduce new data types and being able to perform Protocol Analysis. Examples of technologies you will get exposed here include Logstash, Elastic Search, Suricata (Snort, Yara rules), Wireshark, Kafka, with opportunities to learn or utilise network protocols skills, programming skills (C, Ruby, Bash) and Cyber Security Skills.
Other ongoing activities will be working with Platform sub teams to introduce new technologies to allow continuous development, maintenance, and enhancement.
Directly engaging with a remote team of end users / analysts to discuss and capture requirements.

You’ll Have The Following Skills & Experience

Along with working with our customers and stakeholders, preferred skills include experience of, or exposure to, the following