Incident Response Analyst — CSIRT Forensics (Hybrid)

Airbus S.A.S.; Hampnett; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

TOIL (time off in lieu)

Job summary

Airbus Defence and Space seeks an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help automate detection and response using SIEM/EDR tooling.

You will work in a highly technical environment, perform host forensic analysis, reverse‑engineering, and contribute to the design of incident response processes for Level 1 and 2. SC clearance required; some hybrid work available.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering.
• Experience designing or improving incident response processes and automated detection.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on‑call team.
• Develop and industrialise security tooling and detection use cases.
• Design incident response processes for Level 1/2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities.

Skills

Incident response

SOC/CSIRT

Forensic analysis

Reverse engineering

Threat detection

Automation tooling

Security principles

Education

Bachelor's degree or equivalent

GIAC certs

Tools

SIEM

EDR

Job description

Airbus Defence and Space seeks an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help automate detection and response using SIEM/EDR tooling.

You will work in a highly technical environment, perform host forensic analysis, reverse‑engineering, and contribute to the design of incident response processes for Level 1 and 2. SC clearance required; some hybrid work available.