Incident Response Analyst - CSIRT & SOC Automation

Airbus S.A.S.; Shawford; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Competitive salary

Profit sharing

Pension scheme

Share options

Car leasing

Onsite parking

Season ticket loan

Tax-free tech scheme

Discounted shopping

Flexible hours

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation to enhance detection capabilities across the enterprise.

You will work on incident response processes, contribute to threat detection use cases, and participate in ongoing improvements to security tooling. Hybrid working is available in Newport.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT.
• Proficient in forensic host analysis and reverse‑engineering for incident support.
• Experience designing and improving security processes and automated response capabilities.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Provide on‑call crisis response support with technical analysis.
• Industrialise security tooling (SIEM/EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Drive threat detection and response improvements for daily SOC operations.
• Lead projects on advanced security monitoring and automated responses.

Skills

SOC incident management

Forensic analysis

Reverse engineering

Threat detection

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation to enhance detection capabilities across the enterprise.

You will work on incident response processes, contribute to threat detection use cases, and participate in ongoing improvements to security tooling. Hybrid working is available in Newport.