Incident Response Analyst (CSIRT) - Hybrid, SC Cleared

Airbus S.A.S.; Stroud; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, focusing on automation to enhance detection and response capabilities across our global enterprise.

This role requires hands-on incident handling experience, on-call readiness, and the ability to design robust incident response processes aligned with international teams.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse-engineering for incident response.
• Experience designing or improving security processes and automated response capabilities.
• Degree or equivalent in cyber security with certifications (e.g., GIAC).

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Provide on-call incident response support, performing host forensics and reverse-engineering.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design, implement, and coordinate incident response processes across SOC levels 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated workflows.

Skills

Incident Response

SOC/CSIRT

Threat Detection

Security Tooling

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, focusing on automation to enhance detection and response capabilities across our global enterprise.

This role requires hands-on incident handling experience, on-call readiness, and the ability to design robust incident response processes aligned with international teams.