Cyber Incident Lead

British Airways; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Staff travel benefits

Discounted airfares

Job summary

British Airways is seeking a Cyber Incident Lead to join our security team. You’ll coordinate incident response across the BA estate, working 24/7 to identify, contain, and recover from cyber incidents.

You’ll develop processes, present technical concepts to varied stakeholders, and help strengthen our forensics capability. A calm, analytical leader with MITRE ATT&CK experience will fit well, with desirable digital forensics and aviation sector knowledge.

Qualifications

• Experience in cyber incident response within a large, complex organisation.
• Experience using MITRE ATT&CK framework and concepts.
• Highly analytical with a methodical, structured approach.
• Strong communication to technical and non-technical stakeholders.
• Ability to stay calm and prioritise under pressure.
• Digital forensics experience is desirable.
• Understanding of aviation, transport, or critical infrastructure is desirable.

Responsibilities

• Lead the response to cyber incidents across the BA estate 24/7 as part of an on-call function.
• Develop, maintain, and manage incident response processes.
• Present complex, technical concepts to stakeholders of varying seniority.
• Engage with business stakeholders and build strong relationships.
• Perform thorough risk assessments with vague information.
• Assist with in-house digital forensics capability.
• Work with cyber teams to tune security tool configuration and controls.
• liaise with other OpCos within IAG to coordinate wider incidents.
• Manage relationships with external suppliers in the incident lifecycle.

Skills

MITRE ATT&CK

Incident response

Analytical thinking

Communication

Calm under pressure

Education

GIAC Incident Handler (Desirable)

Job description

A career without limits

As the nation’s flag carrier, we take great pride in connecting Britain with the world and the world with Britain.

It’s something we’ve been doing for over 100 years, ever since we launched the world’s first international scheduled air service between London and Paris.

This originality has been in our blood since day one. It’s the spirit we share with the people that fly with us, our partners, and our colleagues.

So, whether you are a reassuring voice on the end of a phone, a smile at the door, under a wing keeping the turbines spinning or landing us gently in far-flung places, a job at British Airways is yours to make.

We know great things can happen when you’re inspired to think big and bring your ambition to work every day, which is why, at British Airways the sky is never the limit.

The role: Cyber Incident Lead

This role reports into the Cyber Incident Manager, and works with stakeholders across the organisation to ensure BA is able to effectively identify, respond, and recover from cyber incidents.

What you’ll do:

• Leading the effort to respond to, and manage, cyber incidents across the BA estate 24/7 365 days a year as part of an on call function
• Responsible for developing, maintaining, and managing incident response processes
• Ability to present on complex, technical concepts to a wide range of stakeholders of varying seniority and knowledge
• Confident to engage with business stakeholders and build strong and meaningful relationships
• Ability to perform thorough risk assessment with vague and ambiguous information
• Assist with the development of BA’s in-house digital forensics capability, supporting various investigation teams across the organisation
• Work closely with other cyber teams to feed incident data back into tuning our security tool configuration and assessing our deployed controls
• Effectively liaise and communicate with other Operating Companies (OpCos) within IAG to respond to wider-impacting incidents; share IoCs, threat intelligence and lessons learnt
• Responsible for relationship development and continuous improvement of our suppliers who support elements of the cyber incident response lifecycle

What you’ll bring to British Airways:

• Relevant cyber incident response experience within a large and complex organisation, with a solid understanding of incident response methodology
• Experience using MITRE ATT&CK
• Highly analytical, with a methodical and structured approach and high attention to detail
• Good communicator, able to translate complex technical issues for both technical and non-technical stakeholders
• Ability to remain calm and prioritise effectively under pressure
• Relevant experience in digital forensics (Desirable)
• Understanding of aviation, transport, or critical infrastructure (Desirable)
• Relevant cyber security qualifications, such as GIAC Incident Handler (Desirable)

What we offer:

We believe that all the people who work with us should feel valued for the part they play. It’s one of the reasons our rewards go far beyond a competitive salary.

From the day you join us, you’ll get access to brilliant staff travel benefits including unlimited basic and premium standby tickets on British Airways flights. You’ll also receive up to 30 discounted ‘Hotline’ airfares per year for yourself, friends, and family.

At British Airways you’ll have the chance to take on new challenges and move forward in a way that feels right for you. We encourage all those who work for us to consider opportunities right across our business to help you develop and progress.

We never stand still, and we don’t expect our people to either.

Inclusion & Diversity

At British Airways we all have a part to play in creating an inclusive place to work. Diverse representation among our people is really important to us and we recognise that all our colleagues are uniquely different and bring their own originality, creativity and identity to work.

Inclusion and diversity is a key driver of innovation and we’re committed to creating a culture where everyone feels that they can be themselves. We’re looking for people from all backgrounds and cultures to join us and be a part of our journey to become a Better BA as we continue to connect Britain with the world and the world with Britain.