Cyber Incident Lead: 24/7 Response & Digital Forensics

British Airways PLC; Greater London; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Staff travel benefits

Discounted fares

Job summary

British Airways in the United Kingdom seeks a Cyber Incident Lead to join the security team. The role reports to the Cyber Incident Manager and works with stakeholders across the organisation to identify, respond, and recover from cyber incidents.

You will lead 24/7 incident response, develop and maintain response processes, translate complex concepts for diverse audiences, and drive improvements in forensics, tooling, and supplier relationships.

Qualifications

• MITRE ATT&CK knowledge and incident response expertise.
• Strong incident response methodology and execution experience.
• Digital forensics knowledge desirable.
• Proven ability to translate technical issues for diverse audiences.
• Strong risk assessment and decision-making under uncertainty.

Responsibilities

• Lead and coordinate cyber incident response across BA estate 24/7.
• Develop, maintain and improve incident response processes.
• Present complex technical concepts to stakeholders at all levels.
• Engage with business stakeholders and build strong relationships.
• Perform thorough risk assessments with incomplete information.
• Support development of in-house digital forensics capabilities.
• Collaborate with cyber teams to tune security tools and controls.
• Coordinate with IAG OpCos for wider incidents and share IoCs and lessons learned.
• Manage relationships and drive supplier performance in incident response.

Skills

MITRE ATT&CK

Incident response

Digital forensics

Communication

Risk assessment

Education

GIAC Incident Handler

Job description

British Airways in the United Kingdom seeks a Cyber Incident Lead to join the security team. The role reports to the Cyber Incident Manager and works with stakeholders across the organisation to identify, respond, and recover from cyber incidents.

You will lead 24/7 incident response, develop and maintain response processes, translate complex concepts for diverse audiences, and drive improvements in forensics, tooling, and supplier relationships.