> Markdown version of [/jobs/ext/3236597-cyber-incident-lead](https://www.wearedevelopers.com/jobs/ext/3236597-cyber-incident-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Incident Lead

- **Company:** British Airways
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Backup Devices, Cyber Security, Digital Forensics, Mitre Att&ck, Cybercrime
- **Published:** September 11, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=5c14b5fb99ba1d1a

## About the Role

* Relevant cyber incident response experience within a large and complex organisation, with a solid understanding of incident response methodology
 * Experience using MITRE ATT&CK
 * Highly analytical, with a methodical and structured approach and high attention to detail
 * Good communicator, able to translate complex technical issues for both technical and non-technical stakeholders
 * Ability to remain calm and prioritise effectively under pressure
 * Relevant experience in digital forensics (Desirable)
 * Understanding of aviation, transport, or critical infrastructure (Desirable)
 * Relevant cyber security qualifications, such as GIAC Incident Handler (Desirable)

## Description

The role:Cyber Incident Lead

This role reports into the Cyber Incident Manager, and works with stakeholders across the organisation to ensure BA is able to effectively identify, respond, and recover from cyber incidents.

What you'll do:

 * Leading the effort to respond to, and manage, cyber incidents across the BA estate 24/7 365 days a year as part of an on call function
 * Responsible for developing, maintaining, and managing incident response processes
 * Ability to present on complex, technical concepts to a wide range of stakeholders of varying seniority and knowledge
 * Confident to engage with business stakeholders and build strong and meaningful relationships
 * Ability to perform thorough risk assessment with vague and ambiguous information
 * Assist with the development of BA's in-house digital forensics capability, supporting various investigation teams across the organisation
 * Work closely with other cyber teams to feed incident data back into tuning our security tool configuration and assessing our deployed controls
 * Effectively liaise and communicate with other Operating Companies (OpCos) within IAG to respond to wider-impacting incidents; share IoCs, threat intelligence and lessons learnt
 * Responsible for relationship development and continuous improvement of our suppliers who support elements of the cyber incident response lifecycle