Incident Response Analyst (CSIRT, Automation)

Airbus S.A.S.; Hull and East Yorkshire; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Hybrid working

Personal development

Wellbeing support

Life assurance

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our CSIRT. You will manage the full lifecycle of security incidents and support SOC service delivery in a highly technical, hands‑on role, with a focus on automation to enhance threat detection.

You will work on Level 1 and 2 incident response, be on‑call, and collaborate across international teams. A relevant degree and GIAC certs are desirable, and hybrid working is available.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse‑engineering for incident response.
• Experience designing, industrialising, or improving security processes and automated response capabilities.
• Degree or equivalent plus GIAC certs preferred.
• Airbus supports development with customised training solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, executing technical host forensic analysis and reverse‑engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.
• Drive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.
• Execute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.

Skills

Incident management

Forensic analysis

Threat detection

CSIRT experience

Automation

Education

Degree in Cybersecurity/related field

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our CSIRT. You will manage the full lifecycle of security incidents and support SOC service delivery in a highly technical, hands‑on role, with a focus on automation to enhance threat detection.

You will work on Level 1 and 2 incident response, be on‑call, and collaborate across international teams. A relevant degree and GIAC certs are desirable, and hybrid working is available.