Incident Response Analyst: CSIRT, SOC & Automation

Airbus S.A.S.; Brighstone; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Profit sharing

Pension scheme

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC services, and drive automation to improve threat detection and response.

The role requires hands‑on incident handling, host forensics, and experience with SIEM/EDR in a technical SOC/CSIRT environment. Hybrid working and security clearances may apply.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical CSIRT or SOC.
• Experience in host forensic analysis and reverse‑engineering for incident support.
• Experience designing or improving security processes and automated response use cases.
• Hands‑on applied cyber security knowledge with a relevant degree or equivalent experience and industry certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call team and perform host forensic analysis.
• Industrialise security tooling (SIEM, EDR), network and host analysis, and develop detection use cases.
• Design, implement and coordinate robust incident response processes across SOC levels 1 and 2.
• Advance threat detection and response capabilities while supporting daily SOC operations.
• Lead projects related to advanced security monitoring and automated incident workflows.

Skills

SOC/CSIRT experience

Host forensic analysis

Reverse‑engineering

Security tooling (SIEM)

Security tooling (EDR)

Threat detection use cases

Incident response processes

Security principles

Education

Relevant degree or equivalent experience

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC services, and drive automation to improve threat detection and response.

The role requires hands‑on incident handling, host forensics, and experience with SIEM/EDR in a technical SOC/CSIRT environment. Hybrid working and security clearances may apply.