Incident Response Analyst - CSIRT Automation & Forensics

Airbus S.A.S.; Merley; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Annual profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join its international CSIRT in Newport. You will manage the full lifecycle of security incidents, support crisis response, and help industrialise detection tooling across SIEM/EDR. A relevant degree and GIAC certification are advantageous.

The role offers hybrid working options and a clear career development path. Qualifications include experience handling SOC alerts, forensic analysis, and designing robust incident response

Qualifications

• Experience of managing security incidents, monitoring SOC alerts, and utilising advanced security tooling within a highly technical SOC or CSIRT environment.
• Experience of performing technical host forensic analysis and reverse‑engineering to support complex incident response activities.
• Experience of designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience of applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and industry certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, executing technical host forensic analysis and reverse‑engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.
• Drive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.
• Execute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.

Skills

Incident response

SOC/CSIRT tooling

Forensic analysis

Threat detection use cases

Security processes design

GIAC certification

Education

Relevant degree or equivalent experience

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join its international CSIRT in Newport. You will manage the full lifecycle of security incidents, support crisis response, and help industrialise detection tooling across SIEM/EDR. A relevant degree and GIAC certification are advantageous.

The role offers hybrid working options and a clear career development path. Qualifications include experience handling SOC alerts, forensic analysis, and designing robust incident response