Global CSIRT Incident Response Analyst

Airbus S.A.S.; Oving; Híbrido; GBP 65.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Salary & benefits

Work life balance

Personal development

Wellbeing benefits

Family & caregiving

Descripción de la vacante

Airbus Defence and Space is seeking an Incident Response Analyst to join its international CSIRT in Newport. Manage full incident lifecycle, support on‑call crisis response, and help industrialise SIEM/EDR tooling while developing new detection use cases.

The role demands practical cyber security expertise, on‑call readiness, and the ability to coordinate incident response across international teams. Hybrid working is available.

Formación

• Experience managing security incidents and monitoring SOC alerts.
• Experience performing host forensic analysis and reverse‑engineering for incident response.
• Experience designing security processes, threat detection use cases, and automated response capabilities.
• Degree or equivalent in cybersecurity; GIAC certification is a plus.

Responsabilidades

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode with on‑call team; perform host forensics.
• Industrialise tooling (SIEM/EDR) and develop new detection use cases.
• Design and coordinate incident response for SOC 1/2 across locations.
• Improve threat detection and response capabilities; assist daily SOC operations.
• Lead projects on advanced security monitoring and automated incident workflows.

Conocimientos

Incident response

SOC operations

Forensic analysis

Threat detection

Reverse engineering

Educación

Bachelor's degree in cybersecurity or related field

GIAC certification

Herramientas

SIEM

EDR

Descripción del empleo

Airbus Defence and Space is seeking an Incident Response Analyst to join its international CSIRT in Newport. Manage full incident lifecycle, support on‑call crisis response, and help industrialise SIEM/EDR tooling while developing new detection use cases.

The role demands practical cyber security expertise, on‑call readiness, and the ability to coordinate incident response across international teams. Hybrid working is available.