Incident Response Analyst — Forensics & Automation

Airbus S.A.S.; East Grimstead; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Profit sharing

Pension plan

Share options

Car leasing scheme

Onsite parking

Season ticket loan

Tech discount scheme

Hybrid working

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help automate detection and response across global teams.

You will work on crisis‑mode incident handling, host forensics, and the industrialisation of security tooling. Airbus supports flexible, hybrid working and ongoing professional development.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing or industrialising security processes, threat detection use cases, and automated response capabilities.
• Degree or equivalent experience with industry certifications such as GIAC.
• Airbus supports personal growth with customised development solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, executing technical host forensic analysis and reverse‑engineering.
• Contribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.
• Drive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.
• Execute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.

Skills

Incident response

Host forensic analysis

Reverse‑engineering

Security processes & automation

GIAC certification

Education

Degree or equivalent experience (cyber security)

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help automate detection and response across global teams.

You will work on crisis‑mode incident handling, host forensics, and the industrialisation of security tooling. Airbus supports flexible, hybrid working and ongoing professional development.