SIEM CDS

 Job Description – SIEM Content Development Specialist Job Details     Job title SIEM Content Development Specialist (CDS) Reports to (job)
  Head of SIEM Cyber Solutions Team Security Architecture and Design -  Global Services Location Agile Job Dimensions Responsible for developing and delivering SIEM Security Solutions for specific SIEM Security opportunities. Hours Full Time DRs None Job grade SYIT23     Why BT? We've always been an organisation with purpose; to use the power of communications to make a better world.  You can trace this back to our beginning as pioneers of the world's first telecommunications company.  At our heart, we're a technology company with research and innovation in our bones, and a desire to be personal, simple, and brilliant for our customers.  Those are the values we live by. Creating an inclusive working environment where people from all backgrounds can succeed.
 
Our pursuit of progress over the past 180 years has established BT as a strong, successful brand, with huge scale, capable of achieving great things.  From supporting emergency services, hospitals, banks and keeping economies around the world online, safe, and secure.  To delivering large scale technology infrastructure like the creation of BT Sport.
 
Today, in this fast changing, always on, digital world, our purpose remains true. Yet the market conditions, regulation and competition we face are tougher than ever before.  So if you have the drive, optimism, and resilience to help propel us forward, we'll offer unrivalled personal development, a wealth of opportunities to learn, experience new things, and pursue new careers.  If that's you, and what you're looking for.  We'd love you to be part of our future.
  Why this job matters Our purpose is to use the power of communication to make a better world. For each other, for our customers, for society and our communities.

• Security incidents carry financial costs and can impact our brand and reputation.  Using and configuring the right technology gives us the ability to proactively prevent, detect and respond to incidents which allows BT to reduce risk to the business and our customers.
• Understanding the customer to facilitate their strategy, by leveraging people, process and technology to deliver the most efficient and effective service possible to the customer.
• Responsible for the relevance, effectiveness and efficiency of the service towards the customer during the service initiation/transition phase and during in life operations and will act as a trusted advisor.

 
Your role places real value in finding and adapting ways to protect and support our people, customers & communities.
  What I'll be doing – your accountabilities The skills you need

• The CDS role is responsible for the lifecycle of a Use case, the lifecycle of a dashboard and the lifecycle of a log source.
• Leads and controls the AIS and In-life management of the customer SIEM solution.
• Revise SIEM content either proactively through Customer change request or reactively through incident or attack.
• Proactively assist and define measured improvements towards defence activities.
• Continually assess, and reduce risk against the current threat landscape providing customer focused improvements, productivity gains, and cost efficiencies.
• Continually look to identify and implement Security led improvements.
• Conduct technical reviews in line with ASG, SOM and SOC teams.
• Communicate activities for ongoing maintenance when applicable (corrective, preventative and rolling)
• Expected to carry out the responsibilities in accordance with the criteria set forth by agreed industry standards and best practice.

 

• Experience of working in a solution design role for security systems and/or experience working within a managed security organisation with SIEM applications and platforms (IBM QRadar, McAfee, Log Rhythm or Splunk ES with exposure to, or proven experience of, AWS solution provision).
• Excellent planning and execution skills.
• Extensive experience and technical awareness across Cyber Security sector.
• Stakeholder management, communication and influencing skills.
• Excellent leader who can proactively manage their own workstack and customer opportunity.
• Ability to drive a business strategy, influencing effective change across an end to end solution. (e.g. Transformation, Use-Case, Initiatives etc)

  Leadership accountabilities Experience you would be expected to have

• Providing leadership to support the shaping of Cyber Operations, with a mind-set of improving yourself, BT, and the customer experience.

• Individual should have significant experience and understanding of operational factors, contributing to the delivery and end to end effectiveness of a security service.

 

• Experience of customer facing roles, and knowledge of the business drivers to help design teams deliver relevant, effective, efficient and quality service to customers.

  Key decisions

• Implementation of improvements, and support of the IT security strategy.