CSIRT Incident Response Analyst — Automation & On‑Call

Airbus S.A.S.; Havant; Hybrid; GBP 60,000 - 75,000; Full time

Benefits offered by this job

Profit sharing

Pension

Share options

Hybrid working

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection tooling with SIEM and EDR.

The role involves on-call crisis support and coordinating incident response processes across regions. Requires experience in host forensic analysis, reverse engineering, and designing security processes.

Qualifications

• Experience managing security incidents and SOC alerts in a technical CSIRT environment.
• Experience performing host forensic analysis and reverse engineering for incident response.
• Experience designing, industrialising or improving security processes and detection use cases.
• Applicable degree or equivalent experience; GIAC certification is a plus.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode with on-call team.
• Contribute to tooling for SIEM/EDR and new detection use cases.
• Design and coordinate incident response processes for SOC Levels 1 and 2.

Skills

Incident response

SOC/CSIRT operations

Forensic analysis

Reverse engineering

Threat detection

Security processes

Education

Degree or equivalent

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection tooling with SIEM and EDR.

The role involves on-call crisis support and coordinating incident response processes across regions. Requires experience in host forensic analysis, reverse engineering, and designing security processes.