Salary: £36,000 - 67,000 per year Requirements:
* Proven experience in leading cyber intelligence teams and managing technical staff.
* Track record of delivering measurable impact from intelligence.
* Holds current relevant professional qualifications in Intelligence and/or Information Security (e.g. CREST CTIM) or willing to work towards.
* Proven experience in Investigations and Investigation Management, including developing an investigation strategy, planning and conducting interviews, case preparation, and evidence presentation.
* Experience of conducting investigations within either a corporate, law enforcement or similar environment.
* Experience of investigating incidents of cyber and/or cyber-enabled crime in accordance with current legislation (e.g. RIPA, IPA, DPA/GDPR, CPIA, and ACAS codes of practice) as well as BT internal policy.
* Strong knowledge of cybersecurity principles, threat landscapes, and attack vectors.
* Experience of building intelligence coverage of sophisticated nation state threats.
* Knowledge of intelligence tooling.
* Excellent analytical and problem-solving skills.
* Excellent oral and written communication skills.
* Proactive approach to team management and supporting cross-department initiatives.
* Demonstrable experience of proactive, operational delivery in a fast-paced security environment.
* Knowledge and understanding of current security threats, threat models, frameworks, and common mitigations.
* Demonstrable management skills, with an ability to communicate effectively and develop staff.
* Intelligence reporting SME able to deliver high quality products and maintain standards and quality across the team.
Responsibilities:
* Leading a multiskilled team of intelligence specialists to deliver operational outcomes.
* Representing BT as the Subject Matter Expert on Cybercrime, delivering outputs to customers, CISOs, staff, and the Cyber Security community.
* Managing intelligence, threat hunting, and investigative responsibilities as a core part of the incident response team to investigate and respond to security incidents.
* Maintaining high levels of awareness of the latest threat intelligence and cybersecurity trends to fill the role of CTI SME within a wide range of Security engagements.
* Leading collaboration activities with internal teams to provide further internal understanding of potential adversaries and attack vectors.
* Delivering verbal presentations and threat briefs, in-person and virtually, to internal and external stakeholders at all seniority levels.
* Managing relationships within the wider Information Security community and representing BT in a wide range of forums to ensure impactful collaboration across the Telco and National Security communities.
* Building and maintaining relationships with Law Enforcement Agencies.
* Owning Vendor relationships, driving effective integration and usage of vendor platforms to provide the best value for BT.
* Developing the skills and knowledge of your team as a cybercrime SME.
* Ensuring investigations into cyber and/or cyber-enabled crime are managed in accordance with current legislation and BT internal policy.
* Shaping the development of CTI and threat hunting capability within BT.
* Acting as a senior intelligence practitioner for the team, sharing best practices and overseeing intelligence outputs to ensure quality.
* Ensuring a threat-led approach to cybersecurity with intelligence impacting security decision making at all levels of the organization.
Technologies:
* Security
* AI
* Support
* LESS
* Network
More:
At BT Group, we are one of the most critical components of the UKs Critical National Infrastructure, dedicated to defending against cyber attacks. We are in search of a Cybercrime and Investigation Lead to manage a team of technical and investigative specialists. This hybrid role, based in either Bristol or Manchester, will provide you with unrivaled access to data and security tools to help us become the world’s most trusted connector of people, devices, and machines by 2030. We offer an on-target 10% bonus, a pension scheme with a generous employer contribution, equal family leave, 25 days of annual leave plus bank holidays, and world-class training opportunities. Join us as we navigate an unprecedented phase of transformation and make a significant impact on connectivity in the UK.
last updated 50 week of 2025