Incident Response Analyst – Hybrid SOC & Forensics

Airbus S.A.S.; Thorney; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus S.A.S. is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, conduct host forensic analysis and drive automation to strengthen threat detection across the SOC.

This highly technical role requires experience in incident handling, CSIRT operations, and design of automated response workflows, with a willingness to obtain SC clearance and work in Newport with hybrid arrangement.

Qualifications

• Experience handling security incidents in a technical SOC/CSIRT.
• Proficient in host forensic analysis and reverse engineering.
• Experience designing and improving detection use cases and automating responses.
• Degree in cyber security or equivalent and certifications such as GIAC.
• Willing to obtain SC clearance and work in Newport with hybrid option.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on-call crisis team.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate incident response processes for SOC Level 1 and Level 2.
• Improve threat detection and response capabilities; support SOC daily ops.
• Execute projects on advanced monitoring and automated incident response workflows.

Skills

SOC/CSIRT

Incident management

Forensic analysis

Reverse engineering

Threat detection

Security tooling

Education

Cyber security degree

Tools

SIEM

EDR

Network analysis

Job description

Airbus S.A.S. is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, conduct host forensic analysis and drive automation to strengthen threat detection across the SOC.

This highly technical role requires experience in incident handling, CSIRT operations, and design of automated response workflows, with a willingness to obtain SC clearance and work in Newport with hybrid arrangement.