Incident Response Analyst - SOC Automation & Forensics

Airbus S.A.S.; Meonstoke; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing

Onsite parking

Season ticket loan

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, on-call crisis support, and help industrialise detection tooling across SIEM/EDR.

The role emphasizes automation, threat detection, and robust incident processes for global operations. The position offers hybrid working options with a strong focus on security engineering, incident response capabilities, and ongoing professional

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse engineering to support incident response.
• Experience designing or improving security processes, detection use cases, and automated response capabilities.
• Degree or equivalent in a relevant field; GIAC certification preferred.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on-call crisis team.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design, implement and coordinate incident response processes for SOC Level 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects on advanced security monitoring and automated incident response workflows.

Skills

Incident response

CSIRT experience

Forensic analysis

Reverse engineering

Threat detection

Automation tooling

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, on-call crisis support, and help industrialise detection tooling across SIEM/EDR.

The role emphasizes automation, threat detection, and robust incident processes for global operations. The position offers hybrid working options with a strong focus on security engineering, incident response capabilities, and ongoing professional