Incident Response Analyst: CSIRT & SOC Automation

Airbus S.A.S.; Stockbridge; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing

Free onsite parking

Season ticket loan

Technology scheme

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. This hands-on role manages the full lifecycle of security incidents and supports SOC delivery, with a focus on automation to improve threat detection.

You will investigate alerts, perform host forensic analysis, reverse engineering, and help industrialise tooling. A relevant degree and GIAC certification are valued; hybrid working with some flexibility.

Qualifications

• Experience managing security incidents in a SOC or CSIRT environment.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Experience designing and industrialising security processes and automated response use cases.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing follow-up analysis.
• Support incident response in crisis mode as part of the on-call crisis team.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Incident management

SOC/CSIRT tooling

Forensic analysis

Reverse engineering

Security process design

Threat detection use cases

Automated response

Cyber security principles

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. This hands-on role manages the full lifecycle of security incidents and supports SOC delivery, with a focus on automation to improve threat detection.

You will investigate alerts, perform host forensic analysis, reverse engineering, and help industrialise tooling. A relevant degree and GIAC certification are valued; hybrid working with some flexibility.