Incident Response Analyst — CSIRT & SOC Automation

Airbus S.A.S.; New Forest; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Annual profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You’ll manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise security tooling to elevate detection capabilities.

This role is highly technical and hands-on, with a focus on automation and international alignment. You will contribute to threat detection development, perform forensic analysis, and participate in on‑call crisis response while

Qualifications

• Experience managing security incidents in a technical SOC or CSIRT environment.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Experience designing, industrialising, or improving security processes and automated response use cases.
• Degree (or equivalent) in a related field and GIAC certification.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call crisis team.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design, implement, and coordinate incident response processes for SOC Level 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Incident response

SOC/CSIRT experience

Forensic analysis

Threat detection development

Security automation

Education

GIAC certification

Relevant degree or experience

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You’ll manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise security tooling to elevate detection capabilities.

This role is highly technical and hands-on, with a focus on automation and international alignment. You will contribute to threat detection development, perform forensic analysis, and participate in on‑call crisis response while