Incident Response Analyst: CSIRT Automation & Forensics

Airbus S.A.S.; Fritham; Hybrid; GBP 52,000 - 73,000; Full time

Benefits offered by this job

Competitive salary

Profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery with hands‑on analysis and tooling automation.

The role focuses on strengthening threat detection capabilities across our enterprise. The ideal candidate will have CSIRT/SOC experience, technical forensics skills, and a background in designing incident response processes with certifications such as

Qualifications

• Experience managing security incidents and monitoring SOC alerts.
• Experience performing technical host forensic analysis and reverse‑engineering.
• Experience designing or improving security processes, threat detection use cases, and automated responses.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on‑call team with forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Levels 1 and 2 with global alignment.
• Drive continuous improvement of threat detection and response capabilities.
• Lead projects on advanced security monitoring and automated incident response workflows.

Skills

Incident response

SOC/CSIRT experience

Threat detection

Security processes design

On-call crisis handling

Education

Relevant degree or equivalent experience

GIAC

Tools

SIEM

EDR

Forensic tools

Reverse engineering

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery with hands‑on analysis and tooling automation.

The role focuses on strengthening threat detection capabilities across our enterprise. The ideal candidate will have CSIRT/SOC experience, technical forensics skills, and a background in designing incident response processes with certifications such as