Incident Response Analyst – Hybrid & Automation

Airbus S.A.S.; Chilcomb; Hybrid; GBP 60,000 - 100,000; Full time

Benefits offered by this job

Profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Hybrid working

Job summary

Airbus Defence and Space is hiring an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC operations, and help automate detection and response workflows across multiple regions.

The role emphasizes hands‑on analysis, development of new detection use cases, and improving threat detection capabilities within a technically demanding SOC environment. Hybrid work is available.

Qualifications

• Experience managing security incidents in a SOC/CSIRT environment.
• Proficiency in host forensic analysis and reverse‑engineering.
• Experience designing or improving security processes and detection use cases.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call team.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1/2 across teams.
• Drive continuous improvement of threat detection and response capabilities.

Skills

Incident management

SOC/CSIRT experience

Forensic analysis

Threat detection use cases

Automation of response

Security tooling

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is hiring an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC operations, and help automate detection and response workflows across multiple regions.

The role emphasizes hands‑on analysis, development of new detection use cases, and improving threat detection capabilities within a technically demanding SOC environment. Hybrid work is available.