Incident Response Analyst

Airbus SE; Newport; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Pension plan

Hybrid working

Onsite parking

Job summary

Airbus Defence and Space Limited in Newport is seeking a Security Incident Response professional to manage SOC alerts, perform host forensic analysis, and help automate detection and response capabilities. The role requires SC clearance or the ability to obtain it, and offers a hybrid working arrangement.

You will join a team responsible for safeguarding critical systems across international operations, applying practical cyber security principles and evolving incident response processes.

Qualifications

• Experience of managing security incidents, monitoring SOC alerts, and utilising advanced security tooling within a highly technical SOC or CSIRT environment.
• Experience of performing technical host forensic analysis and reverse-engineering to support complex incident response activities.
• Experience of designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience of applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow-up analysis to secure the business.
• Support incident response in crisis mode as part of the on-call crisis team, executing technical host forensic analysis and reverse-engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.

Skills

Security incident management

SOC/CSIRT experience

Threat detection

Incident response planning

Education

Relevant degree or equivalent experience

GIAC certification

Tools

SIEM

EDR

Forensic analysis tools

Job description

Job Description

SECURITY CLEARANCE: Must have or be able to obtain SC Security Clearance LOCATION: Newport (with some hybrid working available subject to our Hybrid Working Policy) TYPE: Full time

WHAT'S IN IT FOR YOU

• Financial Reward: Competitive salary, annual profit share, contributory pension, share options, car leasing scheme, free onsite parking, season ticket loan, tax-free technology scheme, discounted shopping and much more
• Work / Life Balance: 37 hour week, flexible working around core hours, hybrid working, up to 2 additional days per month as TOIL, option to buy/sell holiday. There are no core hours on Friday afternoons. Employees may use this flexibility at their discretion, provided they fulfil their contractual working hours and meet business needs (such as urgent deadlines or client requirements)
• Personal Development: Personalised development plan, Airbus Leadership University and unlimited access to 10,000+ E-learning courses, internal mobility including international opportunities
• Health & Wellbeing: Wellbeing benefits (including 24/7 online GP and mental health support), Employee Assistance Programme, discounted family health / dental insurance / eye tests, cycle-to-work scheme
• Family and Caregiving: Life assurance, enhanced pay for maternity, paternity, adoption and shared parental leave and caregiving
• Inclusive Environment: Wellbeing room, Multi-faith room, Employee Representative Groups (Gender, LGBTQ+, International, Generational, Disability, Social & Cultural Diversity, Neurodiversity)

HOW YOU WILL CONTRIBUTE TO THE TEAM

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow-up analysis to secure the business.
• Support incident response in crisis mode as part of the on-call crisis team, executing technical host forensic analysis and reverse-engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.
• Drive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.
• Execute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.

ABOUT YOU

• Experience of managing security incidents, monitoring SOC alerts, and utilising advanced security tooling within a highly technical SOC or CSIRT environment.
• Experience of performing technical host forensic analysis and reverse-engineering to support complex incident response activities.
• Experience of designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience of applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and industry certifications such as GIAC.

HOW WE CAN SUPPORT YOU

Many of our staff work flexibly in many different ways, including part-time. Please talk to us at interview about the flexibility you need and we’ll always do our best to accommodate your request. Please let us know if you need us to make any adjustments for the selection process – you can share this with your Talent Acquisition Partner if you are invited to interview. Examples may include (but not exclusive to) accessible facilities; auxiliary aids; room layout, etc. Any information disclosed will be treated in the strictest confidence.

As a Disability Confident Employer, Airbus UK will offer an interview to any applicant that considers themselves to have a disability or long-term condition and meets the minimum criteria of the role (as set out in the job advert). To 'opt in', just select the option during your application submission and our Talent Acquisition team will contact you.

This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.

Company: AIRBUS Defence and Space Limited Employment Type: Permanent ------- Experience Level: Professional Job Family: Cyber Security

We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.

Airbus is, and always has been, committed to equal opportunities for all.

At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.

Airbus pioneers sustainable aerospace for a safe and united world. The Company constantly innovates to provide efficient and technologically-advanced solutions in aerospace, defence, and connected services. In commercial aircraft, Airbus offers modern and fuel-efficient airliners and associated services. Airbus is also a European leader in defence and security and one of the world's leading space businesses. In helicopters, Airbus provides the most efficient civil and military rotorcraft solutions and services worldwide.

From sending your resume to participating in successful interviews, here you can access all important pieces of information to guide you in your candidate journey. Learn more