Incident Response Analyst - SOC Automation & Forensics

Airbus S.A.S.; Fleet; Hybrid; GBP 55,000 - 85,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing

Onsite parking

Season ticket loan

Tech scheme

Discount shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. This highly technical role will manage the full lifecycle of security incidents and support SOC service delivery, with automation driving detection capabilities.

You'll investigate SOC alerts, perform host forensic analysis, develop new detection use cases, and design robust incident response processes for Level 1 and 2.

Qualifications

• Experience managing security incidents in a SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing and industrialising security processes and automated detections.
• Degree or equivalent experience; GIAC certs preferred.
• Airbus supports personal growth with customised development solutions.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call crisis team.
• Develop detection use cases and automate incident response workflows.
• Industrialise security tooling (SIEM, EDR) and analysis processes.
• Coordinate incident response across international teams.

Skills

Incident response

SOC alerts monitoring

Host forensic analysis

Reverse engineering

Threat detection use cases

Security tooling

Education

Relevant degree or equivalent experience

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. This highly technical role will manage the full lifecycle of security incidents and support SOC service delivery, with automation driving detection capabilities.

You'll investigate SOC alerts, perform host forensic analysis, develop new detection use cases, and design robust incident response processes for Level 1 and 2.