Cyber Incident Response Analyst (CSIRT)

Airbus S.A.S.; Michelmersh; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Annual profit share

Hybrid working

Free onsite parking

Season ticket loan

Job summary

Airbus Defence and Space in Newport seeks an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, investigate SOC alerts, and support daily SOC operations with hands‑on analysis.

This role emphasizes automation, incident response tooling, and the development of new detection use cases, aligning processes for SOC Level 1 and 2 across our enterprise.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse engineering for incidents.
• Experience designing or improving security processes and automated response use cases.
• Practical cyber security knowledge with a relevant degree or equivalent; GIAC certs welcomed.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, performing host forensic analysis and reverse‑engineering.
• Industrialise security tooling (SIEM, EDR), network/host analysis, and develop new detection use cases.
• Design, implement and coordinate incident response processes for SOC Level 1 & 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities within daily SOC operations.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Incidents management

Forensic analysis

Threat detection design

Cyber security fundamentals

Education

Degree or equivalent experience

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport seeks an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, investigate SOC alerts, and support daily SOC operations with hands‑on analysis.

This role emphasizes automation, incident response tooling, and the development of new detection use cases, aligning processes for SOC Level 1 and 2 across our enterprise.