Job Specifications
Job Description:
Airbus Protect is a European specialist in cyber security, safety and sustainability services. Our mission is to protect governments, military and essential national infrastructure enterprises from cyber threats.
We are over 1800 experts based across our main locations in France, Germany and the UK, each with a Security Operating Centre, we also operate in the US and the Middle East.
We provide a global cyber defence approach that aims to protect, detect and respond to cyber threats with a portfolio including managed security services, industrial control system offerings, encryption, key management and consultancy services.
Our goal: Protect our customers and support their needs with cyber security products.
We are passionate about cyber security. If you share our passion, we want to speak with you.
The Role
An exciting opportunity has arisen for a 2nd Line Analyst within Airbus Protect in Newport.
The role of the 2nd Line Analyst is to be an escalation point for all SOC operational activity. The successful candidate will be responsible for the day to day monitoring of multiple security devices, including SIEM, EDR, SOAR etc, ensuring that all customer SLAs are met.
You will be required to work as part of the SOC team ensuring all SOC operational tasks are completed on time and work tickets updated/closed with satisfactory technical details included.
The 2nd Line Analyst will be comfortable at a technical level, often being required to attend technical workshops and customer briefings/service reviews.
All Analysts are expected to be able to present and write professional reports to key stakeholders and exercise good time management.
This position can offer you:
Are you looking for challenging tasks in a company with some of the most creative cyber security technology and services? Integration into an international network of cyber security experts across and outside of Europe? Would you like to participate in Europe-wide projects as a prime supplier?
We can offer you all of this and more...
Exciting development opportunities and perspectives within Airbus as a global player
An attractive company pension scheme
Airbus Group success share scheme
An extensive range of additional benefits
Tasks And Accountabilities
Perform further analysis of any escalated events and alarms using the SOC toolset and following the heuristic guidance steps described in the associated playbooks.
Provide support and offer expertise across stages of the Incident Response lifecycle such as preparation, detection and analysis, containment, post-incident activity.
Ingest and interpret multiple sources of data from research, reports and incidents and turn them into actionable use cases across various technologies.
On request assist with the initial triage, scoping and containment efforts during incident response engagements and compromise assessments.
Mentor junior analysts.
Lead and direct efficient intelligence driven threat hunts.
Act as a solid technical point of contact for customers.
Maintain currency in cyber security concepts, tools and best practices appropriate to the Senior Cyber Defence Analyst L2 role and associated knowledge, skills, abilities at the stated competence level.
Carry out IOC searches and react using the predefined playbooks.
Develop playbooks for junior analysts to follow.
Provide feedback and support along the first, second and third capability within the Airbus Protect Defence Team
Provide feedback and contribution into the Continual Service Improvement life cycle
We are looking for applicants with the following experience:
Required
Perform further analysis of any escalated events and alarms using the SOC toolset and following the heuristic guidance steps described in the associated playbooks.
Provide support and offer expertise across stages of the Incident Response lifecycle such as preparation, detection and analysis, containment, post-incident activity.
Ingest and interpret multiple sources of data from research, reports and incidents and turn them into actionable use cases across various technologies.
On request assist with the initial triage, scoping and containment efforts during incident response engagements and compromise assessments.
Mentor junior analysts.
Lead and direct efficient intelligence driven threat hunts.
Act as a solid technical point of contact for customers.
Maintain currency in cyber security concepts, tools and best practices appropriate to the Senior Cyber Defence Analyst L2 role and associated knowledge, skills, abilities at the stated competence level.
Carry out IOC searches and react using the predefined playbooks.
Develop playbooks for junior analysts to follow.
Provide feedback and support along the first, second and third capability within the Airbus Protect Defence Team
Provide feedback and contribution into the Continual Service Improvement life cycle
Desirable
SANS SEC503 GCIA
SANS SEC504 GCIH
SANS FOR508 GCFA
Security Blue BTL1 / BT
About the Company
We hope you have a pleasant journey with us, as we share the latest news and views on our family of aircraft, sustainable aviation and much more.
Know more