Incident Response Analyst - SOC Automation Specialist

Airbus S.A.S.; Fishbourne; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Competitive salary

Profit share

Pension plan

Share options

Car leasing scheme

Onsite parking

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and drive automation to strengthen threat detection across the enterprise.

You will lead on technical host forensic analysis, reverse engineering, and the industrialisation of security tooling (SIEM/EDR), ensuring tight alignment with global teams. A degree and relevant certifications are required.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering for incident response.
• Experience designing or enhancing security processes, detection use cases, and automated responses.
• Degree in a relevant field or equivalent experience; GIAC or similar certifications beneficial.

Responsibilities

• Investigate SOC alerts and manage lifecycle of security incidents across the organization.
• Support incident response in crisis mode as part of on‑call team; perform host forensic analysis.
• Industrialise security tooling (SIEM/EDR) and develop new detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1 and 2, aligned internationally.

Skills

Incident response

SOC operations

Forensic analysis

Reverse engineering

Threat detection

Automation tools

SIEM

EDR

Education

Degree in cyber security or computer science

GIAC certification

Tools

SIEM

EDR

Forensic tooling

Threat hunting tools

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and drive automation to strengthen threat detection across the enterprise.

You will lead on technical host forensic analysis, reverse engineering, and the industrialisation of security tooling (SIEM/EDR), ensuring tight alignment with global teams. A degree and relevant certifications are required.