CSIRT Incident Response Engineer

Airbus S.A.S.; Longham; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Competitive salary

Hybrid working

Onsite parking

Job training & development

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents and support SOC service delivery in a highly technical environment.

This role emphasizes automation and the development of new detection use cases across a global network. You will work on on‑call crisis response, host forensic analysis, and contribute to continuous improvement of threat detection capabilities, with hybrid working

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT.
• Experience in host forensic analysis and reverse‑engineering for incident response.
• Experience designing or improving security processes and automated detection.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on‑call team.
• Industrialise security tooling and develop detection use cases.
• Design and coordinate incident response processes for SOC Level 1/2.
• Drive improvement of threat detection and response capabilities.
• Execute projects on advanced security monitoring and automation.

Skills

SOC/CSIRT experience

Forensic analysis

Threat detection use cases

Security tooling (SIEM/EDR)

Security processes design

GIAC certification

Education

Relevant degree or equivalent experience

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents and support SOC service delivery in a highly technical environment.

This role emphasizes automation and the development of new detection use cases across a global network. You will work on on‑call crisis response, host forensic analysis, and contribute to continuous improvement of threat detection capabilities, with hybrid working