Cyber Incident Response & Forensics Specialist

Airbus S.A.S.; Farley; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Pension scheme (contributory)

Share options

Car leasing

Free onsite parking

Season ticket loan

Tech discount scheme

Flexible working options

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and drive tooling automation to elevate threat detection capabilities.

This highly technical role requires hands-on forensic analysis, incident response in crisis mode, and collaboration across international teams. A relevant degree and certifications such as GIAC are valued.

Qualifications

• Experience managing security incidents in a SOC or CSIRT.
• Hands-on host forensic analysis and reverse engineering.
• Experience designing and improving detection use cases and automated responses.
• Strong practical knowledge of cybersecurity principles; relevant degree and certifications.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on‑call team.
• Industrialise security tooling (SIEM/EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC levels 1 and 2.
• Improve threat detection and response capabilities and assist daily SOC ops.
• Execute projects on advanced monitoring and automated incident response workflows.

Skills

SOC/CSIRT experience

Incident response

Forensic analysis

Threat detection engineering

Security automation

Cybersecurity principles

Communication with stakeholders

Education

Bachelor's degree in Cybersecurity or related field

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and drive tooling automation to elevate threat detection capabilities.

This highly technical role requires hands-on forensic analysis, incident response in crisis mode, and collaboration across international teams. A relevant degree and certifications such as GIAC are valued.