Incident Response Analyst - CSIRT (Hybrid, Newport)

Airbus S.A.S.; Caerphilly; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, perform on‑call crisis response, and help industrialise detection capabilities across SIEM/EDR.

The role offers hybrid working options and a path for professional growth. The ideal candidate has hands‑on incident management experience, forensic analysis skills, and a degree with GIAC certification preferred.

Qualifications

• Experience managing security incidents in a technical SOC or CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering.
• Experience designing/improving security processes and detection use cases.
• Degree or equivalent experience; GIAC certification preferred.
• Airbus supports your development with customised solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call team with forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and Level 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects on advanced security monitoring and automated incident response workflows.

Skills

Security incidents management

SOC/CSIRT experience

Forensic analysis

Threat detection use cases

Automated response tooling

Incident response coordination

Education

Bachelor's degree

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, perform on‑call crisis response, and help industrialise detection capabilities across SIEM/EDR.

The role offers hybrid working options and a path for professional growth. The ideal candidate has hands‑on incident management experience, forensic analysis skills, and a degree with GIAC certification preferred.