CSIRT Incident Response & Forensics Analyst

Airbus S.A.S.; Horndean; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport seeks an Incident Response Analyst to join the international CSIRT. You will manage the lifecycle of security incidents, support SOC service delivery, and contribute to automation and threat detection improvements.

The role requires experience in SOC/CSIRT, forensic analysis, and designing resilient incident response processes. A degree and GIAC certification are preferred; Airbus supports development and offers flexible working and international opportunities.

Qualifications

• Experience managing security incidents and SOC alerts in a technical SOC/CSIRT.
• Proficiency in host forensic analysis and reverse-engineering.
• Experience designing security processes and automated response use cases.
• Strong cybersecurity principles with degree or equivalent and certifications such as GIAC.
• Commitment to personal growth and development opportunities.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Provide crisis mode incident response as part of on-call team with forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate incident response processes for SOC Level 1/2 across teams.
• Improve threat detection and response capabilities and support daily SOC operations.
• Lead projects on advanced monitoring and automated response workflows.

Skills

Incident response

SOC/CSIRT operations

Forensic analysis

Threat detection

Automation in security tooling

Education

Bachelor's degree or equivalent

GIAC certification

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport seeks an Incident Response Analyst to join the international CSIRT. You will manage the lifecycle of security incidents, support SOC service delivery, and contribute to automation and threat detection improvements.

The role requires experience in SOC/CSIRT, forensic analysis, and designing resilient incident response processes. A degree and GIAC certification are preferred; Airbus supports development and offers flexible working and international opportunities.