CSIRT Incident Response Analyst & Forensics

Airbus S.A.S.; Newton-on-Ouse; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Car leasing scheme

Onsite parking / season ticket loan

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help drive automation of detection and response across SIEM/EDR tools.

Hybrid working is available, with on‑call responsibilities and a focus on policy‑driven incident handling across international teams. The role emphasizes technical host forensics, incident lifecycle management, and ongoing

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT environment.
• Proficiency in host forensic analysis and reverse‑engineering to support incident response.
• Proven ability to design or improve security processes, detection use cases and automated responses.
• Practical knowledge of cyber security principles, a related degree or equivalent experience, and certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Perform comprehensive follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call team.
• Conduct host forensic analysis and reverse‑engineering activities.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1/2.

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help drive automation of detection and response across SIEM/EDR tools.

Hybrid working is available, with on‑call responsibilities and a focus on policy‑driven incident handling across international teams. The role emphasizes technical host forensics, incident lifecycle management, and ongoing