Locations: Birminghan, Bristol, Manchester, Ipswich or Glasgow

Security isn't always the first thing that comes to mind when you think of BT, but when it comes to keeping everyone safely connected, We Are The Protectors. We deal with thousands of cyber-attacks every day, so that millions of people can safely go about their daily lives and run their businesses. We deliver vital work at scale, with real breadth and impact. We connect for good.

You'll be joining a specialist security team that is a trusted partner to governments worldwide, protecting critical national infrastructure and committed to the safety and security of our nation and global communities. Our mission focused work is innovative, inspiring and technologically challenging in a way that makes every day different and stimulating. We provide the opportunity to work on rare projects, with exciting tools and brilliant people. Everyone has access to unparalleled professional and personal development opportunities and your contribution is always valued.

Why this job matters:

Identification, acquisition and exploitation of diverse data is core to our future security strategy, this includes our strategy ThreatCo programme, Protect Operations, Service Optimisation and other growth initiatives within Security.

The Playbook Engineer role is part of our ThreatCo DevSecOps team and is key to the development of the ThreatCo vision by ensuring that the full complement of operational playbooks is in place and available to underpin the use case development and in-life support capabilities that ThreatCo will bring, to give customers the confidence that they are fully protected even as their threat landscape changes around them.

This role is critical to the platform build of Eagle-i, that underpin the launch of new product enhancements to the market as well as to our internal Security Operations teams.

What you'll be doing:

• Lead the development, testing, deployment and documentation and integration of the SIEM, SOAR and EDR systems within ThreatCo
• Drive the automation of playbooks/workflows and continuously review for opportunities to add further automation.
• Develop and support a Playbook/workflow repository to maximise collaboration and knowledge share amongst the teams.
• Champion the maximising of SOAR's technical issues/features, and work closely with the wider design, delivery, operational engineering teams to deliver and effective and optimised solution
• Continually look to identify and implement Security led improvements

You will have the following skills/experience:

• Strong experience of writing Playbooks/workflows within security related toolsets
• Awareness of cyber security threats and their potential to compromise or disrupt business operations
• Awareness and experience of working with the MSSP (multi-tenanted) solutions desirable
• Excellent understanding of software development practices and principles including experience of Python, REST, and JSON data
• Infrastructure as code

Experience you might have:

• Experience working on customer-leading SIEM/SOAR deployments with awareness of the major toolset such as XSOAR, Resilient, QRadar, Crowdstrike, Skybox, Splunk
• Experience of working in a solution design role for security systems and/or experience working within a managed security organisation with SIEM applications and platforms
• Experience of full devops life-cycle and software/systems integration

Benefits

• Discounted BT Broadband, TV & mobile packages and BT products
• On target Bonus
• Share options and 10% pension contribution
• Professional development and paid for industry certifications/qualifications
• Flexible benefits/rewards including dental insurance, healthcare, gym memberships etc.
• Well-being support for you and your family
• 3 days paid volunteering a year
• Flexible and smart working (subject to business needs)

Security is one of the fastest growing parts of our global organisation. We are protecting our networks from more than 6,500 cyber attacks each day, investing over £40m in research each year - and in employing nearly 3,000 people, we're also the largest private cyber employer in the UK. With incredible opportunities to learn, develop and grow your skills, we'll invest in you, nurture your potential and shape your future - whatever your background or experience.

In today's world, safe and secure digital connections have never been more vital. You'll be joining a global company operating at the forefront of the information age: BT employs 90,000 people in 180 countries. With huge scale, we're capable of achieving great things, striving to be personal, simple, and brilliant for our customers whilst creating an inclusive working environment where people from all backgrounds can succeed. Play your part. Make a difference. We are the Protectors