Incident Response Analyst - CSIRT (Hybrid, SC Cleared)

Airbus S.A.S.; East Dean; Hybrid; GBP 50,000 - 75,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help drive automation for threat detection.

The role involves on-call crisis support, forensic analyses, and developing new detection use cases with a focus on continuous improvement and international alignment within the SOC.

Qualifications

• Experience managing security incidents and SOC alerts in a technical CSIRT.
• Experience performing host forensic analysis and reverse engineering for incident response.
• Experience designing or improving security processes and automated response capabilities.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on-call team.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response.

Skills

Incident response

Forensic analysis

Reverse engineering

Threat detection

Security tooling

Education

Degree or equivalent

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help drive automation for threat detection.

The role involves on-call crisis support, forensic analyses, and developing new detection use cases with a focus on continuous improvement and international alignment within the SOC.