Lead Technical Security Analyst

The Lead Technical Security Analyst is part of Corporate and Cyber Security and provides information/cyber security services to the business. They are responsible for working with the business units to assess the security robustness of the NATS estate including the technical ATM software, platforms and services and providing mitigation advice to internal and external stakeholders. This would include supporting and scoping technical assurance activities with third parties e.g. pen testing.

The Lead Technical Security Analyst is a senior technical member of the team, supporting and developing security analysts, and system engineers, initiating and managing their own work items and acting as a subject matter expert in their focus security domains. This will also include leading cyber exercises and supporting the Security Operation Centre (SOC) as required.

They identify, shape, and deliver subject matter expertise to changes and improvements in collaboration with business units and support their security needs in a manner that both drives compliance with, and develops, security capability.

• Define and lead a strategic plan for technical assurance, in a variety of forms, from vulnerability assessments through to red teaming.
• Lead technical assurance activities under the Cyber Security Assurance process to identify weaknesses and vulnerabilities across the NATS estate, including technical ATM systems. This would include working with business units and managing third party suppliers.
• Lead on product security evaluations, identifying hardware and software vulnerabilities in components. Provide recommended mitigations during design phases.
• Own the cyber lab to test and illustrate vulnerabilities and design both tactical and strategic mitigations. Develop methodologies for the rapid testing of vulnerabilities.
• Design, deliver and maintain a programme of technical security education for internal stakeholders, including cyber exercises.
• Provide advice on practical mitigation techniques and challenge teams to develop their own scenarios for threat analysis and exercising.
• Lead working alongside other aviation and CNI organisations to evaluate alleged security vulnerabilities (e.g. Vulnerability Disclosure).
• Provide support to the Security Operation Centre (SOC) team as directed.

• Degree in Cybersecurity, Information Security, related field or equivalent extensive experience within technical cyber security domains.
• Instruct wider Cyber Security team on the analysis of system architectures, identifying and mitigating vulnerabilities across diverse domains at scale. Extensive experience in most of the following: Cloud, Enterprise IT, Operational Technology, safety-critical systems, secure software development, and emerging technologies like AI and Quantum.
• Proven ability to drive security strategies and deliver risk-based solutions aligned with organisational priorities and constraints.
• Extensive experience of applying industry standards e.g. Mitre ATT&CK, NIST, and emerging security standards.
• Experience of leading technical assurance activities across safety-critical and specialised environments, applying deep domain expertise to ensure robust security practices.
• Experienced in leading technical assurance activities within safety-critical and specialised environments, including oversight of CREST, CHECK, or equivalent roles.
• Ability to assimilate and consider issues from the technical, process and business perspective, supported by a pragmatic attitude to the implementation of security controls in a complex and diverse organisation.
• Expert in risk mitigation plans, and technical controls.
• An accomplished and credible leader with a proven ability to set direction and make sound, timely decisions that deliver business outcomes. Provides clarity of purpose, inspires confidence, and fosters a culture of accountability and excellence.
• Builds strong cross-functional networks, aligning diverse disciplines and viewpoints to deliver results. Demonstrates diplomacy and resilience in overcoming resistance and securing commitment to shared goals.
• An excellent communicator with a proven ability to influence, challenge, and negotiate at all levels, both within the organisation and with external partners. Skilled at simplifying complex issues and ensuring consideration of both technical and business perspectives when shaping decisions.
• Demonstrates a commitment to continuous improvement and professional growth, actively developing self and others to build organisational capability and future leadership strength.

We have adopted agile working to provide greater flexibility and increased choice over working arrangements, with the opportunity for this role to work in our modern office facilities as well as remotely.

If you share our passion to advance aviation and keep the skies safe - we would like to hear from you whatever your age, sex, race, faith, sexual orientation, gender identity, gender expression, visible or invisible disability. Individuals that bring different perspectives, skills, life experiences and backgrounds help us be at the forefront of our industry.