CSIRT Incident Response & Forensics Analyst

Airbus S.A.S.; East Cowes; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, perform host forensic analysis, and contribute to improving threat detection, response capabilities, and automated workflows across a global SOC.

The role emphasizes hands‑on technical work, on‑call crisis engagement, and industrialising detection use cases while aligning with international security standards.

Qualifications

• Experience managing security incidents in a SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing, industrialising or improving security processes and automated response use cases.
• Degree or equivalent experience in cyber security with professional certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Provide crisis mode incident response as part of on‑call team with forensic analysis.
• Industrialise security tooling, develop detection use cases, and enhance incident workflows.
• Design and coordinate incident response processes for SOC Level 1/2 across international teams.
• Improve threat detection and response capabilities and support daily SOC operations.
• Lead projects on advanced security monitoring and automated response workflows.

Skills

Incident response experience

Forensic analysis

Security tooling (SIEM/EDR)

Process design & automation

Threat detection & response

Education

Bachelor's degree in Cyber Security

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, perform host forensic analysis, and contribute to improving threat detection, response capabilities, and automated workflows across a global SOC.

The role emphasizes hands‑on technical work, on‑call crisis engagement, and industrialising detection use cases while aligning with international security standards.