Hybrid CSIRT Incident Response Engineer

Airbus S.A.S.; St Helens; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery while contributing to automation and detection improvements across the enterprise.

The role involves on‑call crisis support, host forensics, and developing robust incident response processes for SOC Level 1 and 2, with opportunities for international collaboration and flexible working arrangements.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse engineering for incident response.
• Experience designing or improving security processes, threat detection use cases, and automated responses.
• Relevant degree or equivalent experience and industry certifications (GIAC).

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents with follow‑up analysis.
• Support incident response in crisis mode as part of on‑call team, including host forensics.
• Contribute to tooling industrialisation (SIEM, EDR) and new detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2 across teams.
• Drive improvements in threat detection and response capabilities in daily SOC operations.
• Execute projects related to advanced security monitoring and automated incident workflows.

Skills

Security incidents

SOC

CSIRT

Forensic analysis

Reverse engineering

Threat detection

Automated response

Security tooling

Incident response processes

Education

Degree or equivalent

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery while contributing to automation and detection improvements across the enterprise.

The role involves on‑call crisis support, host forensics, and developing robust incident response processes for SOC Level 1 and 2, with opportunities for international collaboration and flexible working arrangements.