Hands-On Incident Response Analyst (CSIRT/SOC)

Airbus S.A.S.; Bishopstoke; Híbrido; GBP 65.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive salary

Profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Descripción de la vacante

Airbus Defence and Space is seeking an Incident Response Analyst for the Newport CSIRT, joining an international team focused on managing the full lifecycle of security incidents and strengthening threat detection capabilities. The role emphasizes hands‑on analysis, automation, and collaboration across locations.

You will support on‑call crisis handling, utilise SIEM/EDR tooling, and contribute to robust incident response processes.

Formación

• Experience in managing security incidents and analysing SOC alerts in a technical CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering for incident response.
• Experience designing/improving security processes, threat use cases, and automated response capabilities.
• Practical cyber security knowledge with a relevant degree/certifications (e.g., GIAC).

Responsabilidades

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response during crisis as part of on‑call team, including forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Improve threat detection and response capabilities across the SOC.
• Lead projects on advanced security monitoring and automated incident workflows.

Conocimientos

Incident response

Threat detection

Process improvement

Educación

Relevant degree or equivalent experience

GIAC certification

Herramientas

SIEM

EDR

Forensic analysis

Reverse engineering

Descripción del empleo

Airbus Defence and Space is seeking an Incident Response Analyst for the Newport CSIRT, joining an international team focused on managing the full lifecycle of security incidents and strengthening threat detection capabilities. The role emphasizes hands‑on analysis, automation, and collaboration across locations.

You will support on‑call crisis handling, utilise SIEM/EDR tooling, and contribute to robust incident response processes.