Incident Response Analyst - CSIRT (Hybrid, Newport)

Airbus S.A.S.; Manor Park; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Pension scheme

Share options

Car leasing

Onsite parking

Season ticket loan

Tech scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise security tooling (SIEM/EDR) to boost threat detection across the enterprise.

This hands‑on role requires experience handling SOC alerts, performing host forensic analysis, reverse engineering, and developing robust incident response processes for Level 1 and 2.

Qualifications

• Experience managing security incidents, monitoring SOC alerts, and using advanced tooling in a CSIRT environment.
• Technical host forensic analysis and reverse‑engineering for incident response.
• Designing or improving security processes and automated response use cases.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode with on‑call team; perform forensic analysis.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1/2 across teams.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated workflows.

Skills

SOC/CSIRT experience

Host forensic analysis

Reverse engineering

Security process design

Automated incident response

Education

Bachelor's degree in Cybersecurity or related field

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise security tooling (SIEM/EDR) to boost threat detection across the enterprise.

This hands‑on role requires experience handling SOC alerts, performing host forensic analysis, reverse engineering, and developing robust incident response processes for Level 1 and 2.