Cyber Incident Lead

British Airways PLC; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Staff travel benefits

Discounted fares

Job summary

British Airways in the United Kingdom seeks a Cyber Incident Lead to join the security team. The role reports to the Cyber Incident Manager and works with stakeholders across the organisation to identify, respond, and recover from cyber incidents.

You will lead 24/7 incident response, develop and maintain response processes, translate complex concepts for diverse audiences, and drive improvements in forensics, tooling, and supplier relationships.

Qualifications

• MITRE ATT&CK knowledge and incident response expertise.
• Strong incident response methodology and execution experience.
• Digital forensics knowledge desirable.
• Proven ability to translate technical issues for diverse audiences.
• Strong risk assessment and decision-making under uncertainty.

Responsibilities

• Lead and coordinate cyber incident response across BA estate 24/7.
• Develop, maintain and improve incident response processes.
• Present complex technical concepts to stakeholders at all levels.
• Engage with business stakeholders and build strong relationships.
• Perform thorough risk assessments with incomplete information.
• Support development of in-house digital forensics capabilities.
• Collaborate with cyber teams to tune security tools and controls.
• Coordinate with IAG OpCos for wider incidents and share IoCs and lessons learned.
• Manage relationships and drive supplier performance in incident response.

Skills

MITRE ATT&CK

Incident response

Digital forensics

Communication

Risk assessment

Education

GIAC Incident Handler

Job description

A career without limits

As the nation's flag carrier, we take great pride in connecting Britain with the world and the world with Britain.

It's something we've been doing for over 100 years, ever since we launched the world's first international scheduled air service between London and Paris.

This originality has been in our blood since day one. It's the spirit we share with the people that fly with us, our partners, and our colleagues.

So, whether you are a reassuring voice on the end of a phone, a smile at the door, under a wing keeping the turbines spinning or landing us gently in far-flung places, a job at British Airways is yours to make.

We know great things can happen when you're inspired to think big and bring your ambition to work every day, which is why, at British Airways the sky is never the limit.

The role: Cyber Incident Lead

This role reports into the Cyber Incident Manager, and works with stakeholders across the organisation to ensure BA is able to effectively identify, respond, and recover from cyber incidents.

What you'll do:

• Leading the effort to respond to, and manage, cyber incidents across the BA estate 24/7 365 days a year as part of an on call function
• Responsible for developing, maintaining, and managing incident response processes
• Ability to present on complex, technical concepts to a wide range of stakeholders of varying seniority and knowledge
• Confident to engage with business stakeholders and build strong and meaningful relationships
• Ability to perform thorough risk assessment with vague and ambiguous information
• Assist with the development of BA's in-house digital forensics capability, supporting various investigation teams across the organisation
• Work closely with other cyber teams to feed incident data back into tuning our security tool configuration and assessing our deployed controls
• Effectively liaise and communicate with other Operating Companies (OpCos) within IAG to respond to wider-impacting incidents; share IoCs, threat intelligence and lessons learnt
• Responsible for relationship development and continuous improvement of our suppliers who support elements of the cyber incident response lifecycle

What you'll bring to British Airways:

• Relevant cyber incident response experience within a large and complex organisation, with a solid understanding of incident response methodology
• Experience using MITRE ATT&CK
• Highly analytical, with a methodical and structured approach and high attention to detail
• Good communicator, able to translate complex technical issues for both technical and non-technical stakeholders
• Ability to remain calm and prioritise effectively under pressure
• Relevant experience in digital forensics (Desirable)
• Understanding of aviation, transport, or critical infrastructure (Desirable)
• Relevant cyber security qualifications, such as GIAC Incident Handler (Desirable)

What we offer:

We believe that all the people who work with us should feel valued for the part they play. It's one of the reasons our rewards go far beyond a competitive salary.

From the day you join us, you'll get access to brilliant staff travel benefits including unlimited basic and premium standby tickets on British Airways flights. You'll also receive up to 30 discounted Hotline' airfares per year for yourself, friends, and family.

At British Airways you'll have the chance to take on new challenges and move forward in a way that feels right for you. We encourage all those who work for us to consider opportunities right across our business to help you develop and progress.

We never stand still, and we don't expect our people to either.

Inclusion & Diversity

At British Airways we all have a part to play in creating an inclusive place to work. Diverse representation among our people is really important to us and we recognise that all our colleagues are uniquely different and bring their own originality, creativity and identity to work.

Inclusion and diversity is a key driver of innovation and we're committed to creating a culture where everyone feels that they can be themselves. We're looking for people from all backgrounds and cultures to join us and be a part of our journey to become a Better BA as we continue to connect Britain with the world and the world with Britain.