Hybrid Incident Response Analyst

Airbus S.A.S.; Bishop's Sutton; Híbrido; GBP 60.000 - 90.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Profit share

Pension

Share options

Car leasing

Onsite parking

Season ticket loan

Tax-free tech scheme

Discounted shopping

Hybrid working

Descripción de la vacante

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, contribute to threat detection tooling, and support SOC service delivery in a highly technical, on‑call environment.

The role focuses on improving detection use cases, designing incident response processes for SOC Levels 1 and 2, and advancing automation in security monitoring. Hybrid working and SC clearance are options.

Formación

• Experience managing security incidents, monitoring SOC alerts, and using advanced security tooling within a technical SOC or CSIRT environment.
• Experience performing technical host forensic analysis and reverse‑engineering to support complex incident response activities.
• Experience designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and industry certifications such as GIAC.
• Airbus supports your personal growth with customised development solutions.

Responsabilidades

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, executing technical host forensic analysis and reverse‑engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.
• Drive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.
• Execute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.

Conocimientos

Incident response

Forensic analysis

Reverse engineering

Threat detection

SIEM/EDR tooling

Automation

GIAC certification

On-call response

Educación

Relevant degree

GIAC certification (example)

Herramientas

SIEM

EDR

Descripción del empleo

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, contribute to threat detection tooling, and support SOC service delivery in a highly technical, on‑call environment.

The role focuses on improving detection use cases, designing incident response processes for SOC Levels 1 and 2, and advancing automation in security monitoring. Hybrid working and SC clearance are options.