Cyber SecDevOps Professional

About the role

We build, maintain, develop and improve centralised security management, monitoring, log & Event ingest and reporting platforms for BT Security SOCs (Security Operations Centres) located globally. The platforms which we manage help our SOC Analysts, Specialists, Implementation Engineers and Designers to deliver the best possible Managed Security Services to our customers.

What you’ll be doing

• Monitor platform and resolve any issues reported by monitoring application.
• Maintain the availability, integrity and confidentiality of the security platforms.
• Upgrade, remediate and patch underlying Operating Systems (Windows, Linux, ESXi, firewalls) to maintain the overall platform health.
• Write and update knowledgebase articles.
• Review design documentation to ensure they are accurate, unambiguous and verifiable.
• Conduct vulnerability scans and propose steps for remediation.
• Build and deliver custom applications and resilient systems for the security platform.
• User and groups administration.
• Work across teams to deliver and support of BT Security services features.
• Audit and maintain firewall configurations and policies.
• Support the management of relationships with specific teams, suppliers and stakeholders.
• Assess, design, and improve SOC processes and workflows, focusing on integrating automation through Security Orchestration, Automation and Response (SOAR) tools and technologies

MANDATORY:

• Linux Systems Administration, including install, configure, manage, maintain.
• Knowledge of patching and virtualization tasks
• Excellent written and verbal communications, including documentations skills.
• General IT problem solving and debugging. IT troubleshooting. Network troubleshooting. Firewall troubleshooting.
• Familiarity with ticketing and change management process and procedures.
• Ability to learn new technologies without supervision. Self-driven learning.

MANDATORY

• General IT and security operations knowledge and experience.
• Administration of Linux based OS systems
• Knowledge of IP networks and protocols.

PREFERRED: at least 50%+ of:

• CISSP, CompTIA Network+, Security+, CSA+ and/or CEH or equivalent troubleshoot RHEL systems.
• In-depth knowledge of SSH client and server configuration.
• Unix/Linux shell scripting and common tools, including SELinux, FACLs, etc.
• Windows Systems Administration, including install, configure, manage, maintain, and troubleshoot Windows systems:
• PowerShell.
• Microsoft Active Directory/DNS Administration.
• Microsoft Terminal Server Administration.
• Windows Event Log, and tools such as Winlogbeat, NXLog, Snare, etc.
• Network Administration, including:
• Fortinet Firewalls and VPNs.
• Cisco IOS routers, switches, and fibrechannel.
• Networking protocols and troubleshooting.
• Internet Protocol Version 4.
• Internet Protocol Version 6 (it will take off someday)
• Virtualisation, container orchestration and cloud technologies, including:
• VMware vSphere & ESXi.
• Docker, Kubernetes.
• Proxmox, KVM, QEMU.
• AWS, Azure
• Fault, vulnerability, and performance monitoring, including:
• Opsview, Nagios, Icinga.
• Qualys, Tenable.
• CrowdStrike, Wazuh.
• Patch and configuration management and continuous deployment, including:
• Ansible, Foreman.
• Terraform and Packer.
• Version control, e.g., Git.
• Data processing, warehousing, log retention and SIEM
• Elasticsearch/OpenSearch, Logstash, Filebeat, etc.
• Syslog-NG/Rsyslog, Graylog
• Grafana/Prometheus.
• Security Analytics & Correlation.
• Security Orchestration, Automation and Response including such as Chronicle SOAR, Palo Alto XSOAR, FortiSOAR
• Software Engineering skills such as Python, Perl, Java, Go, Regular expressions, etc.

PREFERRED - SecDevOps Professional candidate

• A background in server and application management in a security environment.
• In depth practical experience and knowledge of a range of specific vendor products related to role.
• In depth practical experience and knowledge of operating systems and server administration.

PREFERRED

• ITIL/ITSM (IT Infrastructure Library/Service Management) – IT Operations experience.
• Knowledge of automation tools and methods.
• Extensive experience working in a sensitive commercial environment with demanding SLAs.
• Experience in managing and delivery of bespoke solutions.
• Experience with SIEM (Security Information and Event Management) systems.
• Experience with Analysis & interpretation of data into useful management information.
• Experience with incident management process & procedures.
• Experience with SANs and storage solutions.
• Experience with Atlassian tools like Jira, Confluence, and Bitbucket, and/or SNOW.
• Experience with CTI solutions
• Experience with SOAR solutions
• Cloud Platforms, architecture, and design patterns– AWS, Azure.

Benefits:

• Cafeteria package - HUF 600,000/ year
• Company car / car allowance
• Performance-based bonus
• Comprehensive private health care package for all the employees, which can be extended to family members
• Nursery support for mothers returning from maternity
• Extended paternity leave: 10+10 day fully paid days
• Commuting allowance
• Home office allowance
• Employee discount opportunities
• Highly affordable mobile packages for the family as well

Work atmosphere and community:

• New high-class offices both in Budapest and Debrecen
• Wide-range of company and community programmes (including support for different sport activities)

Flexibility:

• Family-friendly culture
• Smart working approach (hybrid working model, 3 together, 2 wherever)

About BT

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.