Incident Response Analyst – CSIRT (Hybrid, SC)

Airbus S.A.S.; Christchurch; Hybride; GBP 55 000 - 75 000; Plein temps

Avantages offerts par ce poste

Profit share

Contributory pension

Share options

Car leasing scheme

Onsite parking

Season ticket loan

Tax-free tech scheme

Résumé du poste

Airbus Defence and Space in Newport is seeking an Incident Res ponse Analyst to manage the full lifecycle of security incidents within a global CSIRT and SOC environment. You will work on on‑call crisis response, host forensic analysis, and build out detection use cases across SIEM and EDR tooling.

The role emphasises process industrialisation, international alignment, and ongoing improvements to threat detection capabilities, with hybrid working options and a clear path for professional

Qualifications

• Experience of managing security incidents, monitoring SOC alerts, and utilising advanced security tooling within a highly technical SOC or CSIRT environment.
• Experience of performing technical host forensic analysis and reverse‑engineering to support complex incident response activities.
• Experience of designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience of applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and industry certifications such as GIAC.
• Not a 100% match? Airbus supports your personal growth with customised development solutions.

Responsabilités

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, executing technical host forensic analysis and reverse‑engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.
• Drive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.
• Execute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.

Connaissances

Incident response

SOC/CSIRT experience

Forensic analysis

Reverse engineering

Security tooling automation

Formation

Degree in cybersecurity / related field

GIAC certification

Outils

SIEM

EDR

Forensic tools

Description du poste

Airbus Defence and Space in Newport is seeking an Incident Res ponse Analyst to manage the full lifecycle of security incidents within a global CSIRT and SOC environment. You will work on on‑call crisis response, host forensic analysis, and build out detection use cases across SIEM and EDR tooling.

The role emphasises process industrialisation, international alignment, and ongoing improvements to threat detection capabilities, with hybrid working options and a clear path for professional