Impress employers and recruiters.
Choose from hundreds of resume examples.

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

Play a key role in developing and maturing our Security Operations capability, acting as the bridge between Security Engineering and Security Operations. Improve monitoring, strengthen threat detection, optimize security tooling, and lead incident response. Shape the roadmap, improve operational resilience, and ensure security capabilities evolve with the growing technology landscape.

Responsibilities

• Lead the continual improvement of Security Operations capability, working closely with Security Engineering, technology teams, and third-party partners to strengthen monitoring, detection, and incident response.
• Own the end-to-end incident management lifecycle, coordinating responses, driving investigations, facilitating lessons learned, and ensuring improvement actions are delivered.
• Configure and optimize SIEM, threat protection, and case management platforms, developing new detection rules, alerts, and automation.
• Build and maintain operational playbooks and runbooks, establishing consistent ways of working across internal teams and managed service providers.
• Produce meaningful KPIs and reporting, using operational data to identify trends, improve service performance, and demonstrate security control effectiveness.
• Support security testing, assurance activities, and resilience exercises, ensuring operational security capability evolves with business priorities and regulatory expectations.

Requirements

• Strong experience working within Security Operations, Cyber Defence, or Incident Response in a complex enterprise environment.
• Proven experience managing the end-to-end security incident management lifecycle.
• Hands-on experience configuring and administering SIEM, threat protection, logging, and case management platforms.
• Experience developing threat detection use cases, alerts, dashboards, and operational reporting.
• Strong understanding of security monitoring, investigation, triage, containment, recovery, and continuous improvement.
• Experience developing operational playbooks, runbooks, and standard operating procedures.
• Experience working closely with Security Engineering teams to improve operational capabilities.
• Ability to collaborate with suppliers, technology teams, and stakeholders across the business.
• Experience developing KPIs, operational reporting, and service metrics.
• Strong analytical and communication skills, with the ability to translate technical information for different audiences.
• Good understanding of security governance, operational resilience, and regulatory requirements.

Skills

• SIEM configuration and administration
• Threat protection configuration and administration
• Logging platform configuration and administration
• Case management platform configuration and administration
• Threat detection use case development
• Alert development
• Dashboard development
• Operational reporting
• Security monitoring
• Incident investigation
• Triage
• Containment
• Recovery
• Continuous improvement
• Playbook development
• Runbook development
• Standard operating procedure development
• KPI development
• Service metrics development
• Analytical skills
• Communication skills
• Security governance understanding
• Operational resilience understanding
• Regulatory requirements understanding
• Business Continuity support
• Disaster Recovery support
• Microsoft Sentinel familiarity
• Splunk familiarity
• Microsoft Defender familiarity
• CrowdStrike familiarity
• Security operations automation
• Scripting for security operations
• SOAR technologies

Location

• London office

Work Type

• Hybrid working
• Remote
• Onsite

Experience Level

• Manager

About the Company

• IAG Loyalty is creating more rewarding ways to travel, home to Avios, the global loyalty currency.
• We help millions of members collect and spend rewards across travel, retail, and financial services.
• We are transforming our technology landscape, investing in modern platforms and strengthening cyber security.
• Our vision is to create a more rewarding world of travel and experiences.
• We are committed to building a workplace where people feel they belong and are valued for their perspective.
• IAG Loyalty boasts two ambitious and growing divisions: Loyalty and Holidays.
• Through Avios, we help members turn everyday spend into travel, retail, and financial service rewards.
• Through our Holidays division, including British Airways Holidays and Iberia Vacaciones, we connect customers to thousands of destinations worldwide.

Equal Opportunity

• Inclusion drives better decisions, stronger performance, and more innovative outcomes.
• We actively encourage applications from people with different experiences and backgrounds.
• We are committed to ensuring our recruitment process is fair, inclusive, and accessible.