Incident Response Analyst - CSIRT & Automation (Hybrid)

Airbus S.A.S.; Broadbridge Heath; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Profit share

Pension plan

Share options

Car leasing

Onsite parking

TOIL

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation to enhance threat detection capabilities across the enterprise.

You will work in a highly technical SOC/CSIRT environment, collaborating with cross‑functional teams while applying cyber security principles and leveraging industry certifications such as GIAC to advance

Qualifications

• Experience managing security incidents in a highly technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse engineering.
• Degree or equivalent with industry certifications such as GIAC.
• Security clearance: SC or ability to obtain it.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on-call team; perform host forensics.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Improve threat detection and response capabilities; support daily SOC operations.
• Execute projects related to advanced security monitoring and automated workflows.

Skills

SOC/CSIRT experience

Forensic analysis

Threat detection

Security processes

GIAC cert

Education

Relevant degree or equivalent experience

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation to enhance threat detection capabilities across the enterprise.

You will work in a highly technical SOC/CSIRT environment, collaborating with cross‑functional teams while applying cyber security principles and leveraging industry certifications such as GIAC to advance