Cyber Security Analyst L1

Airbus; Newport; On-site; GBP 26,000 - 38,000; Full time

Benefits offered by this job

25 days holiday

Generous pension scheme

Share options

Car leasing benefits

Dental plan

Job summary

Airbus Protect Limited in Newport, South Wales, is seeking an entry-level Cyber Security 1st line Analyst to support the Security Operations Centre. You will monitor incidents, triage events, and assist with remediation under supervision, with training provided to cover core SOC skills.

The role offers development into threat hunting and use-case creation, with close collaboration across customer SPOCs and engineering teams. A UK national is required for clearance considerations.

Qualifications

• 0–2 years in a cyber analyst role or related field.
• Willingness to learn; training provided.
• Experience with Splunk or EDR is advantageous.
• Strong communication and teamwork.

Responsibilities

• Monitor security alerts and events via SOC platforms.
• Perform initial incident triage and prioritisation.
• Assist with incident response and post-incident reviews.
• Develop and refine detection use cases with SOC.
• Produce reports for customers.

Education

Cyber security degree

0-2 years experience in cyber analysis

Tools

Splunk

Cortex EDR

Job description

Job Description:An exciting opportunity for a Cyber Security 1st line Analyst has arisen within Airbus Protect in Newport, South Wales .This is a new position because of the expansion of the Security Operations Centre and will report directly to the Continuous Monitoring Team Lead under the guidance of the SOC Manager.The role covers internal and external clients and requires working closely with other departments such as our customers SPOCs, Airbus Design and Implementation Engineering, Network Operations, Service Delivery and Service Design Teams.Airbus Protect is looking for someone with 0-2 years of experience in a Cyber Analyst role. They need to be keen and enthusiastic to learn. Training will be provided, where appropriate covering a wide range of 1st Line SOC skills.Tasks and responsibilities:Security Monitoring: Continuously monitor alerts and events through Splunk, Cortex EDR, and other SOC platforms to identify potential security incidents.Incident Triage: Perform initial analysis, investigation, and prioritization of security events to determine the severity and potential impact.Threat Detection: Identify false positives, escalate confirmed incidents to L2 analysts, and assist with remediation efforts as necessary.Tool Management: Gain familiarity with and optimize tools (Splunk, Cortex EDR .e.g.) dashboards to enhance incident detection and reporting.Incident Handling: Support the incident response process, including documenting cases, contributing to post-incident reviews, and ensuring all incidents are tracked and resolved.Threat Hunting (Future Growth): Assist and eventually participate in proactive threat hunting activities to identify and mitigate potential threats.Use Case Development: Collaborate with the SOC team to develop and improve detection use cases based on emerging threats and organizational needs.Reporting: Assist in producing weekly, monthly or quarterly reports for customers, and technical demonstrations within the SOC.Carry out IOC searches and react using the predefined playbooksAre you THE one ?We need someone who has/is:Complete work within the time-frames providedExperience working in high pressure environmentsCyber technical background would be useful but not essentialNetworking knowledge would be advantageous, but not essentialCyber Security knowledge would be advantageousPeople around you define you as an open-minded and dynamic person.AdaptabilityWell-organisedTeam spirit, autonomy and good communication skillsProactivityInnovationBecause of the nature of work undertaken, this position is required to meet special nationality rules and therefore these vacancies are only open to sole British Citizens . If you meet this criteria, you will also require eligibility for clearance by recognised authorities.What’s in it for you…Joining Airbus Protect with :A close and caring management,A pipeline of innovative projects,A community of recognised experts,Great career paths and training opportunities,Great benefits:25 days holidayOption to purchase holidaysGenerous pension schemeEligibility to a Company profit sharing schemeShare optionsAccess to a benefits platform offering car leasing, family health plans, dental plan, shopping discounts and much more …Airbus PROTECT brings together experts in risk analysis and management in the fields of safety, cybersecurity and sustainability. We deliver expertise to our own group, Airbus, for whom we act as a privileged partner, but also to external clients. With over 1,700 experienced professionals based in France, UK and Germany, we service large-scale contracts with companies such as critical infrastructures (CNI), other industries and public institutions.Our positioning and strategy enable us to meet the highest standards of the market and to meet the challenges of tomorrow as a team...Airbus Protect is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.If you are looking for a position with various activities and real professional opportunities…Join the AIRBUS PROTECT journey, we are waiting for you!Passionate about Cyber Security, SIEM, EDR, Cloud, TTPs and have a Cyber related degree#JobAPUKThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.Company:Airbus Protect LimitedContract Type:PermanentExperience Level:Entry LevelJob Family:Cyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to [e-mail] .At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.