Hands-on CSIRT Incident Response Analyst (Hybrid)

Airbus S.A.S.; Whitsbury; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Competitive salary

Profit sharing

Pension scheme

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Responder to join the international CSIRT in Newport. You will manage the lifecycle of security incidents, support SOC service delivery, and help drive automation to enhance threat detection and response.

The role focuses on hands-on incident handling, forensic analysis, and the industrialisation of detection tooling within a highly technical SOC environment. Flexible, hybrid working arrangements are available.

Qualifications

• Experience managing security incidents and monitoring SOC alerts.
• Experience performing host forensic analysis and reverse engineering.
• Experience designing or improving security processes and automated response.
• Practical application of cyber security principles; degree or equivalent and industry certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode within the on‑call crisis team.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Incident response

SOC/CSIRT operations

Forensic analysis

Reverse engineering

Threat detection

Security tooling

Education

Relevant degree or equivalent experience

GIAC certification

Tools

SIEM

EDR

Threat detection platforms

Job description

Airbus Defence and Space is seeking an Incident Responder to join the international CSIRT in Newport. You will manage the lifecycle of security incidents, support SOC service delivery, and help drive automation to enhance threat detection and response.

The role focuses on hands-on incident handling, forensic analysis, and the industrialisation of detection tooling within a highly technical SOC environment. Flexible, hybrid working arrangements are available.