Incident Response Analyst - Hybrid, SC Cleared (Newport)

Airbus S.A.S.; Corhampton; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Profit sharing

Contributory pension

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking a passionate Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and contribute to automation and new detection use cases across our global networks.

You will investigate alerts, perform forensic analysis, and help design robust incident response processes for Level 1 and 2 responders.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC or CSIRT.
• Ability to perform host forensic analysis and reverse‑engineering to support incident response.
• Experience designing or improving security processes, detection use cases and automated responses.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, with comprehensive follow‑up analysis.
• Support incident response in crisis mode as part of the on‑call crisis team, including host forensics.
• Industrialise security tooling (SIEM, EDR), develop detection use cases and automation.
• Design and coordinate incident response processes for SOC Level 1 and Level 2 across international teams.
• Drive continuous improvement of threat detection and response capabilities in daily SOC operations.
• Lead projects related to advanced security monitoring and automated response workflows.

Skills

Security incidents

SOC/CSIRT

Forensic analysis

Threat detection

Automated response

Education

Bachelor’s degree or equivalent

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking a passionate Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and contribute to automation and new detection use cases across our global networks.

You will investigate alerts, perform forensic analysis, and help design robust incident response processes for Level 1 and 2 responders.