Incident Response Analyst: Hybrid & Automation Lead

Airbus S.A.S.; Blackwater; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Pension plan

Car leasing scheme

Season ticket loan

Tax-free technology scheme

Discounted shopping

Onsite parking

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation and new detection use cases.

The role involves on-call crisis response, technical host forensics, and collaboration across global teams. A degree (or equivalent) and GIAC or similar certs are valued.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse-engineering for incident response.
• Experience designing and improving security processes, use cases, and automated response capabilities.
• Degree (or equivalent) in a relevant field and industry certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Provide crisis-mode incident response as part of on-call team with technical forensic analysis.
• Industrialise security tooling and develop new detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Improve threat detection and response capabilities and support daily SOC operations.
• Lead projects on advanced monitoring and automated incident response workflows.

Skills

Incident response

SOC/CSIRT experience

Security tooling

Forensic analysis

Reverse engineering

Threat detection development

Security processes

Education

Degree or equivalent in a relevant field

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automation and new detection use cases.

The role involves on-call crisis response, technical host forensics, and collaboration across global teams. A degree (or equivalent) and GIAC or similar certs are valued.