Skip to main content
AfterDuty

2nd/3rd line Cyber Defence Engineer

Airbus · Cardiff, Wales

Type
Full-time
Posted
5 days ago

Overview

Your investigative mindset and incident response discipline from policing transfer to SOC tooling and threat analysis.

About this role

Job Description

We are looking for an Cyber Defence Engineer 2nd/3rd Line (depending on experience) to join our Team, in Newport.

The Role

  • Support SOC Engineers & Analyst activity.
  • Supports change & release management activity.
  • Ensure scheduled maintenance and patching is approved & delivered within KPI/SLA’s.
  • Produce reports covering SLA Performance, System Performance, Obsolescence, Risk & System availability.
  • System Maintenance, including remote (standalone) platforms.
  • Support the authority with scheduled patching activity, limited to advice and guidance.
  • Liaising with Newport MRO to provide support for daily checks and health status of systems.
  • Monitoring of audit and security logs for breaches and malware across all Zones available.
  • System backups/Restore of the SOC Tooling.
  • Deploy approved patches/software fixes and policy updates.

Are you the one ?

This role is based onsite in Newport with limited opportunity to work from home at this time.

  • The role requires an experienced Cyber Engineer with a strong networking background and ideally have worked on MoD contracts before
  • Splunk knowledge/experience would be highly advantageous
  • Experience carrying out scheduled maintenance and patching to approved deadlines
  • Previous SOC systems maintenance experience
  • Autonomous, precise, reliable and solution-oriented attitude
  • Proactive individual, able to handle multiple topics/ incidents in parallel

Essential Skills

  • Good knowledge of multiple SOC tooling including IDPS/Firewalls/SIEM/Splunk/Email & Web Protection etc.
  • Experience of implementing and fault finding Firewall technologies including Cisco ASR/Palo Alto/Fortinet
  • Excellent understanding of network technologies
  • Experience of Scripting and programming
  • Experience of Windows and RedHat server systems and implementation of CIS hardening

D ue to the nature of the work, these positions are required to meet special nationality rules and therefore these vacancies are only open to sole British Citizens. If you meet this criteria you will also undergo security clearance vetting, if not already security cleared to a minimum DV level.

What’s in it for you…

Joining Airbus Protect with

  • A close and caring management,
  • A pipeline of innovative projects,
  • A community of recognised experts,
  • Great career paths and training opportunities,

Great benefits

  • 25 days holiday
  • Flexi time
  • Option to purchase holidays
  • Generous pension scheme
  • Eligibility to a Company profit sharing scheme
  • Share options
  • Access to a benefits platform offering car leasing, family health plans, dental plan, shopping discounts and much more …

AIRBUS PROTECT

Airbus PROTECT brings together experts in risk analysis and management in the fields of safety, cybersecurity and sustainability. We deliver expertise to our own group, Airbus, for whom we act as a privileged partner, but also to external clients.

With over 1,800 experienced professionals based in France, UK and Germany, we service large-scale contracts with companies such as critical infrastructures (CNI), other industries and public institutions.

Our positioning and strategy enable us to meet the highest standards of the market and to meet the challenges of tomorrow as a team...

Join the AIRBUS PROTECT journey...

#JobAPUK

#BUCyberAP

#2to5YearsExp, #6to10YearsExp

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company

Airbus Protect Limited

Experience Level

Professional

Job Family

Cyber Security <JF-CG-ST>

By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.

Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com .

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.

See all cyber security & digital forensics jobs in Cardiff

Why this fits a police background

  • Police experience explicitly valued
  • Working to legislation & regulation

What cyber security & digital forensics roles pay ex-police

Advertised UK ranges, editorial estimates reviewed July 2026

Digital forensics analyst£32,000–£45,000
DFIR consultant£45,000–£65,000
Senior forensics / IR specialist£60,000–£80,000
Threat-intelligence specialist£55,000–£80,000
Full cyber security & digital forensics salary guide →

More cyber security & digital forensics jobs for ex-police

  • Cyber Security Analyst L1

    Airbus · Cardiff

    Full-time

    Your incident command and high-pressure decision-making experience transfers directly to SOC triage and threat response.

    Posted 3 days ago

  • Cyber Security Analyst L1

    Airbus Protect · Cardiff

    Full-time

    Your incident response discipline and composure under pressure are directly applicable to SOC triage and monitoring.

    Posted 3 days ago

  • Full-time

    Your investigative mindset and evidence-handling discipline from policing transfer directly to digital forensics and incident response.

    Posted Yesterday

  • Contract

    Your investigative judgement and incident response experience from policing transfer directly to cybercrime analysis.

    Posted 2 days ago