CSIRT Incident Response Analyst — Hybrid, Newport

Airbus S.A.S.; Chichester; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Profit sharing

Pension

Car leasing

Onsite parking

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, including on‑call crisis support, host forensic analysis, and automation of detection and response workflows.

You will contribute to the industrialisation of security tooling (SIEM/EDR), design robust response processes for Level 1/2, and drive enhancements in threat detection while supporting daily SOC operations across our global

Qualifications

• Experience in managing security incidents, monitoring alerts, and using advanced tooling in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Experience designing or improving security processes, threat detection use cases, and automated response capabilities.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of on-call crisis team with forensic analysis.
• Contribute to tooling industrialisation (SIEM, EDR) and development of detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1 and Level 2 across international teams.
• Drive continuous improvement of threat detection and response capabilities in daily SOC operations.
• Execute projects related to advanced security monitoring, detection, and automated incident workflows.

Skills

Incident response

Forensic analysis

Threat detection

SOC/CSIRT exposure

Education

Bachelor's degree in Cyber Security or equivalent

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, including on‑call crisis support, host forensic analysis, and automation of detection and response workflows.

You will contribute to the industrialisation of security tooling (SIEM/EDR), design robust response processes for Level 1/2, and drive enhancements in threat detection while supporting daily SOC operations across our global