Cyber Incident Lead — 24/7 Response & Forensics (Travel Perks)

British Airways; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Staff travel benefits

Discounted airfares

Job summary

British Airways is seeking a Cyber Incident Lead to join our security team. You’ll coordinate incident response across the BA estate, working 24/7 to identify, contain, and recover from cyber incidents.

You’ll develop processes, present technical concepts to varied stakeholders, and help strengthen our forensics capability. A calm, analytical leader with MITRE ATT&CK experience will fit well, with desirable digital forensics and aviation sector knowledge.

Qualifications

• Experience in cyber incident response within a large, complex organisation.
• Experience using MITRE ATT&CK framework and concepts.
• Highly analytical with a methodical, structured approach.
• Strong communication to technical and non-technical stakeholders.
• Ability to stay calm and prioritise under pressure.
• Digital forensics experience is desirable.
• Understanding of aviation, transport, or critical infrastructure is desirable.

Responsibilities

• Lead the response to cyber incidents across the BA estate 24/7 as part of an on-call function.
• Develop, maintain, and manage incident response processes.
• Present complex, technical concepts to stakeholders of varying seniority.
• Engage with business stakeholders and build strong relationships.
• Perform thorough risk assessments with vague information.
• Assist with in-house digital forensics capability.
• Work with cyber teams to tune security tool configuration and controls.
• liaise with other OpCos within IAG to coordinate wider incidents.
• Manage relationships with external suppliers in the incident lifecycle.

Skills

MITRE ATT&CK

Incident response

Analytical thinking

Communication

Calm under pressure

Education

GIAC Incident Handler (Desirable)

Job description

British Airways is seeking a Cyber Incident Lead to join our security team. You’ll coordinate incident response across the BA estate, working 24/7 to identify, contain, and recover from cyber incidents.

You’ll develop processes, present technical concepts to varied stakeholders, and help strengthen our forensics capability. A calm, analytical leader with MITRE ATT&CK experience will fit well, with desirable digital forensics and aviation sector knowledge.