CSIRT Incident Response Analyst – Automation & Detection

Airbus S.A.S.; Sherfield on Loddon; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus S.A.S. is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation to enhance detection and response capabilities.

You will work across Level 1 and 2 incident response, collaborating with teams internationally while applying advanced security tooling and forensic techniques to protect critical assets.

Qualifications

• Experience managing security incidents and monitoring SOC alerts.
• Experience performing host forensic analysis and reverse‑engineering.
• Experience designing or improving security processes and automated response capabilities.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Participate in crisis mode incident response as part of on‑call team and perform forensic analysis.
• Industrialise security tooling (SIEM/EDR) and develop detection use cases.
• Design and coordinate robust incident response processes for SOC levels 1 and 2.
• Drive continual improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated response workflows.

Skills

Security incidents

SOC tooling

Forensic analysis

Incident response design

Threat detection use cases

Automation in IR

Education

Relevant degree or equivalent experience

GIAC certification

Tools

SIEM

EDR

Job description

Airbus S.A.S. is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation to enhance detection and response capabilities.

You will work across Level 1 and 2 incident response, collaborating with teams internationally while applying advanced security tooling and forensic techniques to protect critical assets.