CSIRT Incident Response Analyst | Automation & Forensics

Airbus S.A.S.; Three Legged Cross; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free tech scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking a passionate Incident Response Analyst to join our international CSIRT. Manage the lifecycle of security incidents and support SOC service delivery in a highly technical, hands‑on role.

Automation is a key target; your ideas will help drive detection capabilities to the next level and secure our world‑class enterprise. We value GIAC or equivalent certifications and a relevant degree.

Qualifications

• Experience of managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT.
• Experience in host forensic analysis and reverse‑engineering for incident response.
• Experience designing security processes, threat detection use cases, and automated responses.
• Relevant degree (or equivalent) and industry certifications such as GIAC.
• Airbus supports your personal growth with customised development solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Provide on‑call incident response support and perform host forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design, implement, and coordinate robust incident response for SOC Level 1/2.
• Drive continuous improvement of threat detection and automated response.
• Execute projects related to advanced security monitoring and automation.

Skills

Incident response

SOC/CSIRT tooling

Forensic analysis

Threat detection

SIEM/EDR

Education

Bachelor's degree or equivalent

GIAC certification

Tools

SIEM

EDR

Reverse engineering tools

Job description

Airbus Defence and Space in Newport is seeking a passionate Incident Response Analyst to join our international CSIRT. Manage the lifecycle of security incidents and support SOC service delivery in a highly technical, hands‑on role.

Automation is a key target; your ideas will help drive detection capabilities to the next level and secure our world‑class enterprise. We value GIAC or equivalent certifications and a relevant degree.