> Markdown version of [/jobs/ext/1604285-cyber-security-specialist](https://www.wearedevelopers.com/jobs/ext/1604285-cyber-security-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Specialist - **Company:** Virgin Atlantic - **Location:** Crawley, UK - **Contract:** Permanent contract - **Skills:** Cyber Security, Intrusion Detection and Prevention, PCI Data Security Standards, Red Team (Cyber Security), Security Information and Event Management, Systems Integration, Data Logging, Mitre Att&ck, Cybercrime, Purple Team (Cyber Security), Cyber Warfare - **Published:** July 17, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=6574df8d73c4a9d2 ## About the Role You'll be someone who brings cyber operations experience, technical curiosity and a collaborative mindset, with a real interest in improving monitoring, detection and response outcomes. * You have experience in cyber security operations, SOC, MDR, security monitoring, incident response or a similar operational security environment. * You're comfortable working with SIEM platforms, detection engineering, alert tuning, log-source onboarding, telemetry analysis or data-quality improvement. * You understand threat analysis, defensive monitoring concepts, intrusion methods and common attacker techniques, and can turn insight into practical action. * You've worked with security tooling, workflow optimisation, integrations, automation or SOAR processes, and enjoy finding better ways of working. * You can communicate technical security issues clearly to different audiences and influence through evidence, expertise and thoughtful challenge. * You bring a good understanding of cyber security frameworks such as NIST CSF, ISO/IEC 27001, MITRE ATT&CK or PCI DSS. A relevant certification would be helpful, but equivalent practical experience is just as valued. ## Description Our Cyber Security team plays a critical role in protecting our customers, people, operations and technology environment, helping us deliver safe, resilient and secure experiences across the airline. We're looking for a technically capable and proactive Cyber Operations Specialist to join our Information & Cyber Security team. This is an exciting opportunity for someone with experience in cyber operations, security monitoring, incident response or SIEM engineering who wants to help strengthen operational cyber resilience in a complex, fast-moving enterprise environment. Day to day As part of our Cyber Operations capability, you'll help protect Virgin Atlantic by strengthening how we monitor, detect and respond to cyber threats across our technology estate. You'll work closely with internal technology teams, managed security providers and specialist partners to improve detection coverage, telemetry quality, response readiness and operational security tooling. It's a great opportunity for someone who enjoys practical problem-solving, thoughtful collaboration and making security operations better every day. * Support cyber incident triage, investigation, containment, evidence gathering, escalation and lessons-learned activity. * Develop and tune detection rules, SIEM use cases and alerting logic, using threat analysis, incident learning and known attacker techniques. * Support SIEM engineering, log-source onboarding, parser validation and improvements to telemetry quality. * Maintain and improve security tooling, integrations and automation workflows, including opportunities to streamline operational activity. * Support red team, purple team and threat-led testing from a logging, detection, response and evidence-capture perspective. * Work with infrastructure, cloud, endpoint, identity, network, application and platform teams to improve security visibility, response capability and operational resilience. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)