CSIRT Incident Response Specialist - Automation & Forensics

Airbus S.A.S.; Whitwell; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Annual profit share

Contributory pension

Share options

Car leasing scheme

Onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC operations, and help automate detection and response workflows in a highly technical environment.

Bring experience with SIEM/EDR, host forensic analysis, and threat hunting. A relevant degree and GIAC‑level certifications strengthen your application.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing and improving security processes, threat use cases, and automated response capabilities.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents across an international environment.
• Provide on‑call incident response in crisis mode and perform host forensic analysis.
• Contribute to tooling industrialisation (SIEM/EDR), detection use cases, and automated response workflows.
• Design and coordinate robust incident response processes for SOC level 1 and level 2 with global alignment.
• Drive continual improvement of threat detection and response capabilities while supporting daily SOC operations.
• Lead projects related to advanced security monitoring and automated incident response.

Skills

Incident response

SOC/CSIRT

SIEM

EDR

Forensic analysis

Reverse-engineering

Threat detection use cases

Automated response

Security processes

GIAC certification

Education

Bachelor's degree in a relevant field

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC operations, and help automate detection and response workflows in a highly technical environment.

Bring experience with SIEM/EDR, host forensic analysis, and threat hunting. A relevant degree and GIAC‑level certifications strengthen your application.