Cyber Security Specialist

Location: Hybrid - 3 days at VHQ, Crawley

Hours: Full Time, 37.5 hours per week. Monday to Friday

Contract Type: Permanent

Salary: Competitive

Closing Date: 24th July 2026

We review applications on a rolling basis and may close the advert early if we receive a high volume of applications.

At Virgin Atlantic Airways, we believe that everyone can take on the world, and it's our vision to become the most loved travel company. As we embark on this next exciting stage of our journey, we’re harnessing our spirit of entrepreneurship and innovation to challenge the status quo.

In a nutshell

Our Cyber Security team plays a critical role in protecting our customers, people, operations and technology environment, helping us deliver safe, resilient and secure experiences across the airline.

We’re looking for a technically capable and proactive Cyber Operations Specialist to join our Information & Cyber Security team. This is an exciting opportunity for someone with experience in cyber operations, security monitoring, incident response or SIEM engineering who wants to help strengthen operational cyber resilience in a complex, fast-moving enterprise environment.

Day to day

As part of our Cyber Operations capability, you’ll help protect Virgin Atlantic by strengthening how we monitor, detect and respond to cyber threats across our technology estate.

You’ll work closely with internal technology teams, managed security providers and specialist partners to improve detection coverage, telemetry quality, response readiness and operational security tooling. It’s a great opportunity for someone who enjoys practical problem-solving, thoughtful collaboration and making security operations better every day.

• Support cyber incident triage, investigation, containment, evidence gathering, escalation and lessons-learned activity.
• Develop and tune detection rules, SIEM use cases and alerting logic, using threat analysis, incident learning and known attacker techniques.
• Support SIEM engineering, log-source onboarding, parser validation and improvements to telemetry quality.
• Maintain and improve security tooling, integrations and automation workflows, including opportunities to streamline operational activity.
• Support red team, purple team and threat-led testing from a logging, detection, response and evidence-capture perspective.
• Work with infrastructure, cloud, endpoint, identity, network, application and platform teams to improve security visibility, response capability and operational resilience.

About you

You’ll be someone who brings cyber operations experience, technical curiosity and a collaborative mindset, with a real interest in improving monitoring, detection and response outcomes.

• You have experience in cyber security operations, SOC, MDR, security monitoring, incident response or a similar operational security environment.
• You’re comfortable working with SIEM platforms, detection engineering, alert tuning, log-source onboarding, telemetry analysis or data-quality improvement.
• You understand threat analysis, defensive monitoring concepts, intrusion methods and common attacker techniques, and can turn insight into practical action.
• You’ve worked with security tooling, workflow optimisation, integrations, automation or SOAR processes, and enjoy finding better ways of working.
• You can communicate technical security issues clearly to different audiences and influence through evidence, expertise and thoughtful challenge.
• You bring a good understanding of cyber security frameworks such as NIST CSF, ISO/IEC 27001, MITRE ATT&CK or PCI DSS. A relevant certification would be helpful, but equivalent practical experience is just as valued.

About You

You’ll be someone who brings cyber operations experience, technical curiosity and a collaborative mindset, with a real interest in improving monitoring, detection and response outcomes.

• You have experience in cyber security operations, SOC, MDR, security monitoring, incident response or a similar operational security environment.
• You’re comfortable working with SIEM platforms, detection engineering, alert tuning, log-source onboarding, telemetry analysis or data-quality improvement.
• You understand threat analysis, defensive monitoring concepts, intrusion methods and common attacker techniques, and can turn insight into practical action.
• You’ve worked with security tooling, workflow optimisation, integrations, automation or SOAR processes, and enjoy finding better ways of working.
• You can communicate technical security issues clearly to different audiences and influence through evidence, expertise and thoughtful challenge.
• You bring a good understanding of cyber security frameworks such as NIST CSF, ISO/IEC 27001, MITRE ATT&CK or PCI DSS. A relevant certification would be helpful, but equivalent practical experience is just as valued.

If this sounds like you, and you would like to unlock your potential with us, we would love to hear from you!

Be yourself – Our differences make us stronger

Our customers come from all walks of life and so do our colleagues. That’s why we’re proud to be an equal opportunity employer and actively encourage applications from all backgrounds. At Virgin Atlantic, we believe everyone can take on the world - no matter your age, gender, gender identity, gender expression, ethnicity, sexual orientation, disabilities, religion, or beliefs. We celebrate difference and everything that makes our colleagues unique by upholding an inclusive environment in which we can all thrive. So that everyone at Virgin Atlantic can be themselves and know they belong.

To make your journey with us accessible and individual to you, we encourage you to let us know if you’d like a little extra help with your application, or if you have any individual requirements at any stage along your recruitment journey. We are here to support you, so please reach out to our team, ([email protected]) feeling confident that we’ve got your individual considerations covered.

Our recipe for Leadership

At Virgin Atlantic, our leaders empower teams to thrive through collaboration, innovation, and excellence. Explore our Leadership Recipe and discover the 20 core ingredients that define what it means to lead with us, driving our mission to be the most loved travel company and achieve sustainable profit. Want to learn more? Click here