Incident Response Analyst – CSIRT & Threat Automation

Airbus S.A.S.; Marden; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking a passionate Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, perform host forensic analysis, and contribute to the development of detection use cases.

This is a highly technical, hands‑on role with on‑call responsibilities and a focus on automation. You will work within a global SOC, drive tooling industrialisation, and coordinate incident response processes across regions.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT
• Experience performing host forensic analysis and reverse‑engineering
• Experience designing or improving security processes and detection use cases
• Practical application of cyber security principles; degree or equivalent experience; GIAC certification desired

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents
• Support incident response in crisis mode as part of on‑call team
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases
• Design and coordinate incident response processes for SOC Level 1/2 with international alignment
• Drive ongoing improvement of threat detection and response capabilities
• Lead projects on advanced security monitoring and automated incident response workflows

Skills

Incident response

SOC/CSIRT

Forensic analysis

Reverse engineering

Threat detection

Security tooling

Automation

Crisis management

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Forensic tools

Network analysis

Job description

Airbus Defence and Space is seeking a passionate Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, perform host forensic analysis, and contribute to the development of detection use cases.

This is a highly technical, hands‑on role with on‑call responsibilities and a focus on automation. You will work within a global SOC, drive tooling industrialisation, and coordinate incident response processes across regions.