Cybercrime and Investigation Lead (Assembly, Bristol, United Kingdom)
Why this job matters
BT Group is one of the most critical of all UK Critical National Infrastructure.
Our job is simple - defend it from Cyber Attack.
Your role at BT is pivotal in helping us achieve this. You will have access to an unparalleled level of data and security tooling to help us achieve our goal of being the world’s most trusted connector of people, devices and machine by 2030. Managing a team of technical and investigative specialists, your role is to understand the cyber threat to BT from criminal actors and to build our ability to counter this.
This role is hybrid (3 days in office) in either Bristol or Manchester
What you’ll be doing
* Leading a multiskilled team of intelligence specialists to deliver operational outcomes
* Represent BT as the Subject Matter Expert on Cybercrime, delivering outputs to customers, CISOs, staff and Cyber Security community.
* Managing intelligence, threat hunting and investigative responsibilities as a core part of the incident response team to investigate and respond to security incidents.
* Maintain high levels of awareness of the latest threat intelligence and cybersecurity trends to fill the role of CTI SME within wide range of Security engagements.
* Leading collaboration activities with internal teams across the organisation in order to provide further internal understanding of potential adversaries and attack vectors.
* Delivery of verbal presentations and threat briefs, in-person and virtually, to internal and external stakeholders at all seniority levels.
* Relationship management within the wider Information Security community. Representation of BT in a wide range of forums, to ensure impactful collaboration across the Telco and National Security communities. Of central importance to this role is building and maintaining LEA relationships.
* Ownership of Vendor relationships - driving effective integration and usage of vendor platforms, in order to drive best value and effect for BT.
* Developing the skills and knowledge of your team as a cybercrime SME.
* Ensure all investigations into cyber and/or cyber-enabled crime are managed in accordance with current legislation (e.g. RIPA, IPA, DPA/GDPR, CPIA and ACAS codes of practice) as well as BT internal policy.
* Shaping the development of CTI and threat hunting capability within BT.
* Senior intelligence practitioner for the team able to share best practice and oversight of intelligence outputs to ensure the highest quality.
* Ensuring that BT takes a threat led approach to cyber security with intelligence having a demonstrable impact on security decision making at all levels of the organisation.
Skills/Experience Required for the Role
Must Have
* Proven experience in leading cyber intelligence teams and managing technical staff.
* Track record of delivering measurable impact from intelligence
* Holds current relevant professional qualifications in Intelligence and/or Information Security (e.g. CREST CTIM)– or willing to work towards.
* Proven experience in Investigations and Investigation Management, including developing an investigation strategy, planning and conducting interviews, case preparation and evidence presentation.
* Experience of conducting investigations within either a corporate, law enforcement or similar environment
* Experience of investigating incidents of cyber and/or cyber-enabled crime in accordance with current legislation (e.g. RIPA, IPA, DPA/GDPR, CPIA and ACAS codes of practice) as well as BT internal policy.
* Strong knowledge of cybersecurity principles, threat landscapes, and attack vectors.
* Experience of building intelligence coverage of sophisticated nation state threats
* Knowledge of intelligence tooling
* Excellent analytical and problem-solving skills.
* Excellent oral and written communication skills
* Proactive approach to team management and supporting cross department initiatives
* Demonstrable experience of proactive, operational delivery in a fast-paced security environment
* Knowledge and understanding of current security threats, threat models, frameworks and common mitigations
* Demonstrable management skills, with an ability to communicate effectively and develop staff.
* Intelligence reporting SME able to deliver high quality products and maintain standards and quality across the team.
Nice to Have
* Knowledge of commercial intelligence platforms
* Experience within Telecommunications/CNI environment
* Network analysis skills
* Experience in generating threat intelligence from technical data sources
* Investigative Interviewing: Trained to conduct investigative interviews using the PEACE model or similar.
Benefits
1. On target 10% on target bonus
2. BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
3. From January 2025, equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It’s for all parents, no matter how your family is made up.
4. Enhanced women’s health support: including help with menopause symptoms, cancer screenings, period care and more.
5. 25 days annual leave (not including