Senior SOC Analyst

IAG Transform UK; Greater London; On-site; GBP 85,000 - 115,000; Full time

Benefits offered by this job

Health insurance

Pension

Performance bonuses

Job summary

IAG Transform UK is seeking a Senior SOC Analyst to identify, investigate and respond to threats across IAG networks, systems, and applications. You will act as the primary escalation point for critical alerts, drive proactive threat hunting, and mentor junior analysts.

The role requires working with security leadership and business units, with occasional after-hours on-call for critical incidents in a dynamic aviation-focused environment.

Qualifications

• Security analysis and incident investigation across cloud, identity, email, network and endpoint.
• Investigation of Windows and Linux systems using EDR/XDR tooling such as CrowdStrike and Microsoft Defender.
• AWS log monitoring, including GuardDuty, CloudTrail and VPC Flow Memory forensics, including dump extraction and analysis.
• Threat hunting and TTP research.
• Strong understanding of the cyber threat landscape, particularly in aviation.
• Malware analysis and reverse engineering.
• Penetration testing.
• Digital forensics.

Responsibilities

• Act as the primary escalation point for critical security alerts and lead investigations.
• Drive containment and remediation with relevant teams within required time frames.
• Turn threat intelligence into proactive threat hunting and research new attacks.
• Produce and interpret security metrics for senior leadership.
• Mentor less experienced analysts and participate in on-call rotation.

Skills

Security incident analysis

Threat hunting

Cloud security

EDR/XDR tools

Windows & Linux forensics

Malware analysis

Penetration testing

Digital forensics

Tools

CrowdStrike

Microsoft Defender

AWS GuardDuty

CloudTrail

Job description

About Us

We are part of International Airlines Group (IAG), one of the world’s leading airline groups and owner of some of the biggest brands in the sky. IAG Transform provides creative and innovative solutions to drive sustainable transformation by delivering procurement and airline services, as well as group-wide systems across IAG. Each operating company benefits from the Transform centralised model, driving efficiencies, automation, and economies of scale.

Purpose of the role

The Senior SOC Analyst is a senior member of the IAG Cyber Defence Centre. The role identifies, investigates and responds to emerging and ongoing threats across IAG networks, systems, users and applications. It acts as the primary escalation point for critical security alerts, leads proactive threat hunting, and works with technical and non-technical teams, up to security leadership, to make sure risks are mitigated quickly. The role also mentors and guides less experienced analysts. The Senior SOC Analyst uses a wide range of tools and resources to identify, investigate and respond to threats affecting IAG networks, systems, users and applications. The role works closely with technical and non-technical teams, including security leadership and business representatives, and drives the relevant teams to take the right actions in the right time frames to mitigate risk. It includes a rotating on-call schedule and may require work outside normal hours for critical incidents.

Your responsibilities

• Act as the primary escalation point for critical security alerts, analysing them and building the full attack chain across cloud, identity, email, network and endpoint.


• Lead investigation and response to security incidents, driving the relevant teams to contain and remediate within the required time frames.


• Turn threat intelligence into proactive threat hunting, and research new and emerging attacks, threat actors, malware and TTPs.


• Produce and interpret security metrics, and present findings clearly at all levels, up to senior leadership.


• Mentor and guide less experienced analysts.


• Take part in the rotating on-call schedule and respond to critical incidents outside normal hours when required.

Your skills, experience and qualifications

• Security analysis and incident investigation across cloud, identity, email, network and endpoint


• Investigation of Windows and Linux systems using EDR/XDR tooling such as CrowdStrike and Microsoft Defender


• AWS log monitoring, including GuardDuty, CloudTrail and VPC Flow Memory forensics, including dump extraction and analysis


• Threat hunting and TTP research


• Strong understanding of the cyber threat landscape, particularly in aviation


• Malware analysis and reverse engineering


• Penetration testing


• Digital forensics

What we offer

The chance to enjoy a challenging career in an exciting, fast-moving environment in a dynamic industry. The opportunity to work in a multi-cultural environment with great offices in many locations. We support our people in maintaining work/life balance, as well as providing the many benefits one would expect from a global organisation, including health insurance, pension and performance bonuses. We are an equal opportunities employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law

Company Overview

IAG Transform is a part of International Airlines Group (IAG). IAG is one of the world’s largest airline groups with 600+ aircraft carrying more than 122 million customers to 260 destinations across 91 countries each year. IAG brings together leading airline brands Aer Lingus, British Airways, Iberia, Level, Vueling. These are supported by IAG Loyalty that spans all its airlines and beyond, offering the global currency Avios and including BA Holidays, and IAG Cargo which delivers vital goods and produce around the world. These businesses are complementary to its core airline businesses. As the first airline group globally to commit to net zero by 2050, sustainability is a core part of IAG’s strategy. IAG Transform plays a critical role in driving transformation across IAG and the aviation industry, through expertise and capabilities in procurement, technology, AI, innovation, and transformation.

Location

We are based in London, UK, with a presence in Dublin, Madrid, Barcelona and Kraków.