Cyber Security Analyst L1

Airbus Protect; Newport; On-site; GBP 25,000 - 38,000; Full time

Benefits offered by this job

25 days holiday

Generous pension scheme

Profit sharing scheme

Share options

Benefits platform access

Job summary

Airbus Protect in Newport, South Wales, is seeking a Cyber Security 1st line Analyst to join the Security Operations Centre. The role supports internal and external clients and reports to the SOC Manager, offering training and hands-on exposure to SOC tools and processes.

The ideal candidate has 0-2 years in cyber analysis, a proactive mindset, and the ability to work under pressure. Citizenship and clearance requirements apply per client guidelines.

Qualifications

• 0-2 years of experience in a Cyber Analyst role.
• Training will be provided covering 1st Line SOC skills.
• Willingness to learn and adapt to a security operations environment.

Responsibilities

• Monitor security alerts and events using Splunk, Cortex EDR and SOC tools.
• Perform initial triage, investigation and prioritisation of security events.
• Identify false positives and escalate incidents to L2 analysts as needed.
• Assist with remediation efforts and improve detection use cases.
• Contribute to weekly/monthly/quarterly SOC reports and technical demos.

Skills

Cyber security basics

Networking knowledge

Analytical skills

Splunk

Cortex EDR

Tools

Splunk

Cortex EDR

Job description

Job Description

An exciting opportunity for a Cyber Security 1st line Analyst has arisen within Airbus Protect in Newport, South Wales.

This is a new position because of the expansion of the Security Operations Centre and will report directly to the Continuous Monitoring Team Lead under the guidance of the SOC Manager.

The role covers internal and external clients and requires working closely with other departments such as our customers SPOCs, Airbus Design and Implementation Engineering, Network Operations, Service Delivery and Service Design Teams.

Airbus Protect is looking for someone with 0-2 years of experience in a Cyber Analyst role. They need to be keen and enthusiastic to learn. Training will be provided, where appropriate covering a wide range of 1st Line SOC skills.

Tasks And Responsibilities

• Security Monitoring: Continuously monitor alerts and events through Splunk, Cortex EDR, and other SOC platforms to identify potential security incidents.
• Incident Triage: Perform initial analysis, investigation, and prioritization of security events to determine the severity and potential impact.
• Threat Detection: Identify false positives, escalated confirmed incidents to L2 analysts, and assist with remediation efforts as necessary.
• Tool Management: Gain familiarity with and optimize tools (Splunk, Cortex EDR .e.g.) dashboards to enhance incident detection and reporting.
• Incident Handling: Support the incident response process, including documenting cases, contributing to post-incident reviews, and ensuring all incidents are tracked and resolved.
• Threat Hunting (Future Growth): Assist and eventually participate in proactive threat hunting activities to identify and mitigate potential threats.
• Use Case Development: Collaborate with the SOC team to develop and improve detection use cases based on emerging threats and organizational needs.
• Reporting: Assist in producing weekly, monthly or quarterly reports for customers, and technical demonstrations within the SOC.
• Carry out IOC searches and react using the predefined playbooks

Are you THE one ?

We Need Someone Who Has/is

• Complete work within the time-frames provided
• Experience working in high pressure environments
• Cyber technical background would be useful but not essential
• Networking knowledge would be advantageous, but not essential
• Cyber Security knowledge would be advantageous
• People around you define you as an open-minded and dynamic person.
• Adaptability
• Well-organised
• Team spirit, autonomy and good communication skills
• Proactivity
• Innovation

Because of the nature of work undertaken, this position is required to meet special nationality rules and therefore these vacancies are only open to sole British Citizens. If you meet this criteria, you will also require eligibility for clearance by recognised authorities.

What’s in it for you…

• Joining Airbus Protect with :
  • A close and caring management,
  • A pipeline of innovative projects,
  • A community of recognised experts,
  • Great career paths and training opportunities,
• Great benefits:
  • 25 days holiday
  • Option to purchase holidays
  • Generous pension scheme
  • Eligibility to a Company profit sharing scheme
  • Share options
  • Access to a benefits platform offering car leasing, family health plans, dental plan, shopping discounts and much more …

Airbus PROTECT brings together experts in risk analysis and management in the fields of safety, cybersecurity and sustainability. We deliver expertise to our own group, Airbus, for whom we act as a privileged partner, but also to external clients. With over 1,700 experienced professionals based in France, UK and Germany, we service large-scale contracts with companies such as critical infrastructures (CNI), other industries and public institutions.

Our positioning and strategy enable us to meet the highest standards of the market and to meet the challenges of tomorrow as a team...

Airbus Protect is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

If you are looking for a position with various activities and real professional opportunities…

Join the AIRBUS PROTECT journey, we are waiting for you!

Passionate about Cyber Security, SIEM, EDR, Cloud, TTPs and have a Cyber related degree

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company

Airbus Protect Limited

Contract Type

Permanent

Experience Level

Entry Level

Job Family

Cyber Security

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail].

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.