Cyber Incident Response Analyst (SOC/CSIRT)

Airbus S.A.S.; Wellow; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Res ponse Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and drive automation across SIEM/EDR tooling.

The role requires hands‑on incident handling, host forensic analysis, and developing new detection use cases, with opportunities for hybrid working and international collaboration within a world‑class security team.

Qualifications

• Experience managing security incidents in a SOC/CSIRT.
• Experience with host forensic analysis and reverse‑engineering.
• Background in threat detection and automated response development.
• Degree or equivalent; GIAC certification preferred.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode with technical host forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design, implement and coordinate incident response processes for SOC Levels 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated workflows.

Skills

SOC/CSIRT experience

Incident response & forensics

Threat detection use cases

Automated response capabilities

Cybersecurity principles

Education

Bachelor's degree or equivalent

GIAC certification

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space is seeking an Incident Res ponse Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and drive automation across SIEM/EDR tooling.

The role requires hands‑on incident handling, host forensic analysis, and developing new detection use cases, with opportunities for hybrid working and international collaboration within a world‑class security team.