Incident Response Analyst - SC Clearance, Hybrid

Airbus S.A.S.; Hythe; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents from detection to remediation and support SOC service delivery in a highly technical environment.

You will investigate SOC alerts, perform host forensic analysis, and help industrialise security tooling (SIEM, EDR) and detection use cases while coordinating incident response processes across regions.

Qualifications

• Experience managing security incidents in a highly technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Experience designing or improving security processes and automated response use cases.
• Degree or equivalent in a relevant field; GIAC or similar certifications preferred.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on-call team.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1 and Level 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Security incident management

Host forensic analysis

Reverse engineering

Security process design

Cyber security principles

Education

Bachelor's degree in a relevant field

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents from detection to remediation and support SOC service delivery in a highly technical environment.

You will investigate SOC alerts, perform host forensic analysis, and help industrialise security tooling (SIEM, EDR) and detection use cases while coordinating incident response processes across regions.