Incident Response Analyst - Hybrid & SC Cleared

Airbus S.A.S.; Leeds; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit sharing

Pension

Share options

Car leasing

Onsite parking

Season ticket loan

Tech scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection capabilities across our global enterprise.

This hands‑on role emphasizes automation and rapid threat detection improvements. The ideal candidate has experience in incident response within a technical SOC/CSIRT, host forensics, and designing security processes with GIAC

Qualifications

• Experience managing security incidents, monitoring SOC alerts, and using advanced tooling in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing or improving security processes, threat detection use cases, and automated responses.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents across international teams.
• Support incident response in crisis mode as part of the on‑call team, performing technical host forensics.
• Industrialise security tooling (SIEM/EDR), and develop new detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1 and 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities within SOC daily operations.
• Execute projects and tasks related to advanced security monitoring and automated incident workflows.

Skills

Incident response

SOC tooling

CSIRT experience

Threat detection

Forensic analysis

Education

Bachelor's degree or equivalent

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection capabilities across our global enterprise.

This hands‑on role emphasizes automation and rapid threat detection improvements. The ideal candidate has experience in incident response within a technical SOC/CSIRT, host forensics, and designing security processes with GIAC