CSIRT Incident Response Analyst (Hybrid, SC Clearance)

Airbus S.A.S.; West Itchenor; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery with automation to drive threat detection capabilities.

The role requires SOC/CSIRT experience, forensic analysis skills, and a proactive approach to developing detection use cases. Hybrid working is available in the Newport area.

Qualifications

• Experience managing security incidents in a SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Experience designing security processes, threat detection use cases, and automated response capabilities.
• Degree or equivalent experience; GIAC certification preferred.
• Airbus supports your personal growth with customized development solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, with thorough follow‑up analysis.
• Support incident response in crisis mode as part of the on‑call crisis team; conduct host forensic analysis and reverse‑engineering.
• Industrialise security tooling (SIEM, EDR), network and host analysis, and develop new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and 2 with international alignment.
• Drive continuous improvement of threat detection and response while supporting SOC daily operations.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Security incidents

CSIRT experience

Forensic analysis

Reverse engineering

Threat detection

Automation

SIEM/EDR

Process design

Education

Bachelor's degree or equivalent

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery with automation to drive threat detection capabilities.

The role requires SOC/CSIRT experience, forensic analysis skills, and a proactive approach to developing detection use cases. Hybrid working is available in the Newport area.