CSIRT Incident Response Analyst (Hybrid)

Airbus S.A.S.; Martyr Worthy; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Pension plan

Share options

Car leasing

Onsite parking

Season ticket loan

Tech scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery in a highly technical environment.

You will contribute to automation, threat detection improvements, and the industrialisation of tooling (SIEM/EDR), coordinating incident response processes across Level 1 and Level 2 teams worldwide.

Qualifications

• Experience managing security incidents in a CSIRT/SOC.
• Technical host forensic analysis and reverse engineering.
• Design/improve security processes and detection use cases.
• Security principles with degree and GIAC certs.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Provide on-call incident response and host forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop new use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Drive threat detection and response capability improvements.
• Handle projects on advanced monitoring and automated responses.

Skills

SOC experience

Forensic analysis

Reverse engineering

Incident response

Threat detection

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Forensic tooling

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery in a highly technical environment.

You will contribute to automation, threat detection improvements, and the industrialisation of tooling (SIEM/EDR), coordinating incident response processes across Level 1 and Level 2 teams worldwide.