Cyber Security Engineer Department: Cyber Security, Information Technology
Reports To: Information and Cybersecurity Senior Manager
Work Patterns: Mon-Fri 9am-5:30pm (not Inc. Bank Holidays)
The Cybersecurity team, within the LLA IT department, is responsible for information and cyber security at London Luton Airport. Responsibilities include information and cybersecurity risk management and ensuring compliance to CAA, NIS and ISO27001 standards. The team also works closely with our majority shareholder, Aena, and with airport partners, such as retailers, ground handlers and airlines, as well as LLA’s suppliers, to ensure a joined-up approach to information and cyber security.
We are seeking a highly skilled and motivated IT Cyber Security Engineer, with a passion for protecting digital assets against cyber threats, to join our dynamic team. The successful candidate will have a strong technical background and a thorough understanding of IT systems, which is essential for effectively securing our infrastructure, systems, and networks. Expertise in information security, risk management and compliance are essential, as is a commitment to defending LLA against cyber threats and integrating security across all layers of our IT environment to protect organizational data and technology.
This role focuses on detecting, investigating, and responding to cybersecurity threats and incidents, while also managing BAU security tasks, ongoing maintenance, supporting projects, and assisting with regulatory compliance to encourage continual enhancement of our IT security environment.
Endpoint monitoring and analysis.
Malware analysis and forensics research.
Enforce security policies, procedures, and guidelines for all IT systems and operations.
Provide recommendations for improving security practices to meet evolving regulatory and organizational needs.
Advise incident responders & other teams on cybersecurity threats.
Collaborate with other IT teams to ensure seamless security integration with infrastructure, applications, and services.
Maintain comprehensive documentation related to security configurations, incident reports, audits, and compliance activities.
Proactively monitor the performance of systems and make regular routine inspections of installed equipment and take corrective avoidance actions to prevent wider problems.
Function as the point of escalation for the Service Desk for security related tickets.
Analysis of weekly vulnerability scans and update relevant records.
Incident readiness and handling as part of the Computer Security Incident Response team (CSIRT).
Monitor and analyse security logs from various systems (including SIEM) and network devices to identify potential threats and vulnerabilities.
Bachelor’s degree in computer science, Information Technology, Cyber Security, or a related field.
~5+ years of experience in cybersecurity, with a strong understanding of network protocols and security tools.
~ A well organised and structured approach to work planning, time allocation to tasks, and a flexible approach to daily routines to deliver the desired results.
~ An ambition to constantly learn new skills and develop knowledge, with an understanding that study time outside of working hours may be required for career development.
~ Credible knowledge/experience of Microsoft Windows operating systems, Active Directory, Exchange Server, Group policies, TCP/IP, DNS, DHCP and MS Azure/EntraID.
~ Capable of analysing information technology logs and events sources preferred.
~ Working knowledge of data storage systems, data backup and restoration methods.
~ Understanding of cybersecurity tooling, its purpose and functionality (Anti-Malware, IDS/IPS, Web and Email Gateways, security analysis tools, web security tools, next generation firewalls/UTMs)
~ Contribute credibly to IT department’s delivery of SLAs and other support targets.
~ Ability to analyse vulnerabilities, threats, designs, architectures, procedures, and ability to produce reports and communicate security intelligence.
~ Advanced knowledge of computer forensics; legal, government and jurisprudence as they relate to cybersecurity.
~ Knowledge of Cloud computing, computer network defence, identity management, privileged access management, incident management and network security.
~ IT certifications such as CompTIA A+, Network+ • Cyber certifications such as CISM, CISA, CEH, or CompTIA Security+
Understanding of regulatory frameworks and industry standards (e.g., Experience in scripting or programming languages including PowerShell for automating security tasks.
Planning & organising. You will be required to pass a range of referencing and vetting checks, including a Criminal Record Check and a Counter Terrorism Check (CTC). LLA is committed to fostering, promoting and preserving a culture of diversity, equality and inclusion, as we carry out our mission.