Cyber Defence Analyst L2 in Newport, Wales

About Airbus Protect

Airbus Protect is a European specialist in cyber security, safety and sustainability services. Our mission is to protect governments, military and essential national infrastructure enterprises from cyber threats. We operate in Europe, the US and the Middle East, with operations in France, Germany and the UK.

Role

We are looking for a 2nd Line Analyst based in Newport to serve as an escalation point for SOC operational activity. The successful candidate will monitor multiple security devices (SIEM, EDR, SOAR, etc.) to ensure customer SLAs are met, complete SOC operational tasks on time, and update work tickets with comprehensive technical details.

Responsibilities and Accountabilities

• Perform further analysis of escalated events and alarms using the SOC toolset and SOC playbooks.
• Support and provide expertise across all stages of the Incident Response lifecycle.
• Interpret multiple data sources (research, reports, incidents) and turn them into actionable use cases.
• Assist with triage, scoping and containment during incident response engagements.
• Mentor junior analysts.
• Lead and direct intelligence‑driven threat hunts.
• Serve as a technical point of contact for customers.
• Maintain currency in cyber security concepts, tools and best practices appropriate to the Senior Cyber Defence Analyst L2 role.
• Carry out IOC searches and respond using predefined playbooks.
• Develop playbooks for junior analysts.
• Provide feedback and support along the first, second and third capability within the Airbus Protect Defence Team.
• Contribute to the Continual Service Improvement life cycle.

Required Experience and Qualifications

• 3+ years of experience in SOC operations and Incident Response.
• Proven ability to analyze security alerts, conduct root‑cause investigations and draft professional reports.
• Experience with SIEM, EDR, SOAR and related security tooling.
• Strong communication skills and the ability to present findings to stakeholders.
• Good time‑management and ability to work effectively as part of a team.

Desirable Qualifications

• SANS SEC503 GCIA, SEC504 GCIH or FOR508 GCFA.
• Security Blue BTL1 / BTL2 or PJMR.
• CREST (Registered Intrusion Analyst) (CRIA).

Soft Skills / Other Requirements

• Professional report writing and presentation skills.
• Strong time‑management and teamwork abilities.

Working Location and Travel

The role is based in Airbus Protect offices, Newport, South Wales, with occasional travel within the UK and abroad.

Eligibility

Due to the nature of the work and security clearance requirements, this vacancy is only open to sole British Citizens who can meet the DV level security clearance criteria.

Equal Employment Opportunity

We are committed to equal employment opportunities regardless of race, colour, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender, gender identity or expression, or veteran status. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is proud to be an equal opportunity workplace.

Contract Type: Permanent

Experience Level: Professional

Job Family: Cyber Security

Additional Information

By submitting an application you consent to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. Airbus is committed to workforce diversity and an inclusive environment. We will never request any type of monetary exchange during the recruitment process.