SIEM Application Engineer (Snowhill, Birmingham, United Kingdom)

Join the Frontlines of Network Security: SIEM Application Engineer Opportunity at BT

Are you a seasoned cybersecurity professional with a passion for building robust and innovative security solutions? BT, a pioneer in telecommunications with an unrivalled heritage, is seeking a skilled SIEM Application Engineer to join their dynamic Security Engineering team. This is a pivotal role, essential to safeguarding BT's network and meeting stringent security requirements, directly contributing to enhanced threat detection and incident response.

This position offers a unique chance to work on the development, implementation, and operation of BT's strategic SIEM solution, with a specific focus on leveraging the power of Elasticsearch. If you're driven by technological advancement and the critical mission of protecting vital infrastructure, this opportunity warrants your serious consideration.

Why This Role is a Career Game-Changer:

• Impactful Contribution: You will be instrumental in bolstering BT's network security, directly contributing to compliance with TSA requirements and improving their Cyber Assurance Framework (CAF) level. Your work will have a tangible effect on the security posture of a leading global telecommunications company.
• Cutting-Edge Technology: This role places you at the heart of utilizing the Elastic Stack (ELK), specifically focusing on Elasticsearch, Logstash, and Kibana. You'll be instrumental in designing, developing, and maintaining a strategic SIEM solution, offering ample opportunities to deepen your expertise in these in-demand technologies.
• Career Growth and Development: BT is committed to fostering talent. You'll benefit from world-class training and development opportunities, with a clear career progression path. The emphasis on knowledge-sharing, mentoring, and agreeing personal goals with your Team Lead ensures continuous professional growth.
• Hybrid Working and Location Flexibility: Enjoy a balanced work-life with a hybrid model (3 days in office). This role can be based in either Birmingham or Manchester, offering flexibility for candidates in these regions. (Note: Ipswich is an option for existing BT employees).
• Comprehensive Benefits Package: Beyond a competitive salary with a potential 10% on-target bonus, BT offers a strong benefits package including the BT Pension scheme, generous family leave policies (including equal family leave from January 2025), enhanced women's health support, 25 days annual leave, 24/7 virtual GP appointments, carer's leave, and the opportunity to join BT Shares Saving schemes.
• Collaborative and Supportive Environment: You'll be part of a supportive team, encouraged to contribute to team running, knowledge-sharing, and even organizing team events. The company culture values collaboration and mutual growth, with opportunities to mentor colleagues.

Key Considerations for Your Career Path:

• Technical Depth with Elasticsearch: This role is heavily focused on Elasticsearch expertise. A strong understanding of its architecture, query optimization, performance tuning, and data ingestion pipelines (using Logstash and Beats) is essential. Experience with Elastic Security features for access control, authentication, and encryption will be highly valued.
• Security Engineering Acumen: Beyond SIEM, a broader understanding of cybersecurity principles is crucial. This includes experience in detection rule development (aligned with MITRE ATT&CK Framework), vulnerability management, access management, and other enterprise security controls. A background that spans both development and operational perspectives will be a significant advantage.
• End-to-End Solution Delivery: The expectation is for candidates to take ownership of requirements from conception to delivery. This involves detailed requirement gathering, robust design, and innovative implementation. If you thrive in a role where you can see a project through from beginning to end, this is an excellent fit.
• Data Ingestion and Enrichment: A key aspect of the role involves configuring data ingestion pipelines, particularly from Kafka, and enriching this data with threat intelligence. Familiarity with ETL processes and data validation within Elasticsearch will be vital.
• Adaptability and Continuous Learning: The cybersecurity landscape is constantly evolving. Staying informed about emerging threats, security best practices, and relevant technologies is a core part of the role. Your commitment to continuous learning will be key to success.
• Communication Skills: The ability to present complex technical information to both technical and business audiences is a required skill. This includes clear documentation writing and effective collaboration.
• Desirable Skills: While not always mandatory, possessing knowledge of cloud services, microservices architecture, Git, DevOps practices, Terraform/Ansible, and specific cyber security qualifications will significantly strengthen your application. Understanding of Telecoms Security Act (TSA) is also a plus.

For candidates who don't meet every single qualification: BT is committed to building a diverse and inclusive workplace. If you are excited about this role but feel your experience doesn't perfectly align with every criterion, please still apply. Your unique skills and perspective may be exactly what BT is looking for.