Hybrid Incident Response Analyst - CSIRT & Automation

Airbus S.A.S.; Hampreston; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing scheme

Onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Flexible working

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection capabilities with SIEM and EDR tooling.

The role requires hands-on incident handling, host forensic analysis, and development of automated response workflows, with a strong emphasis on collaboration across global teams. Hybrid working is available.

Qualifications

• Experience in managing security incidents, monitoring SOC alerts and using advanced tooling in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Design, industrialise, or improve security processes, threat detection use cases and automated response capabilities.
• Strong practical understanding of cyber security principles; degree or equivalent experience; GIAC certification is a plus.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents; perform follow-up analysis to secure the business.
• Support incident response in crisis mode as part of on-call team; perform host forensic analysis and reverse engineering.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and Level 2 with international alignment.
• Drive continual improvement of threat detection and response capabilities; support SOC daily operations.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Security incident management

SOC/CSIRT experience

Threat detection use cases

Security tooling

Crisis incident response

Cyber security principles

Education

Relevant degree or equivalent experience

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection capabilities with SIEM and EDR tooling.

The role requires hands-on incident handling, host forensic analysis, and development of automated response workflows, with a strong emphasis on collaboration across global teams. Hybrid working is available.