Hybrid: Incident Response & Threat Detection Specialist

Airbus S.A.S.; Howe Bridge; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking a passionate Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and contribute to automation and detection capabilities across global teams.

The role emphasizes hands‑on incident handling, host forensics, and development of new detection use cases while aligning with international SOC standards and processes.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering for incident response.
• Experience designing and improving security processes, threat detection use cases, and automated responses.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on‑call team.
• Industrialise security tooling and develop new detection use cases.
• Design and coordinate robust incident response processes for SOC Levels 1 and 2.

Skills

Security incidents management

SOC/CSIRT experience

Forensic analysis

Reverse‑engineering

Threat-detection use cases

Industrialisation of security tooling

Education

Relevant degree or equivalent experience

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking a passionate Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and contribute to automation and detection capabilities across global teams.

The role emphasizes hands‑on incident handling, host forensics, and development of new detection use cases while aligning with international SOC standards and processes.