Incident Response Analyst: CSIRT Automation & Forensics

Airbus S.A.S.; Empshott; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Flexible working arrangements

Disability Confident Employer

Development opportunities

Job summary

Airbus Defence and Space (Newport) is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and contribute to automated detection and response workflows.

The role is highly technical, with on‑call crisis duties and a strong focus on threat detection improvements. You will work in a hybrid model with a flexible approach to working hours, supporting SOC Level 1/2 processes and international

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a highly technical SOC or CSIRT environment.
• Experience performing technical host forensic analysis and reverse‑engineering to support incident response activities.
• Experience designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience applying cyber security principles in practice, backed by a degree (or equivalent) and GIAC certification.
• Airbus supports personal growth with customised development solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, conducting host forensic analysis and reverse‑engineering.
• Contribute to industrialisation of security tooling (SIEM, EDR), network and host analysis, and new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities while supporting SOC daily operations.
• Execute projects related to advanced security monitoring, detection, and automated incident response workflows.

Skills

Incident management

SOC monitoring

Forensic analysis

Reverse engineering

Threat detection

Automation tooling

Security tooling

Education

Degree or equivalent

GIAC certification

Tools

SIEM

EDR

Forensic tooling

Job description

Airbus Defence and Space (Newport) is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and contribute to automated detection and response workflows.

The role is highly technical, with on‑call crisis duties and a strong focus on threat detection improvements. You will work in a hybrid model with a flexible approach to working hours, supporting SOC Level 1/2 processes and international