Incident Response Analyst: SOC, Forensics & Detection

Airbus S.A.S.; Southampton; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Annual profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax‑free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection use cases and tooling.

The role requires hands‑on technical work, on‑call crisis participation, and collaboration across global teams to align incident response processes and drive automation for threat detection.

Qualifications

• Experience of managing security incidents in a SOC/CSIRT environment.
• Experience performing technical host forensic analysis and reverse‑engineering.
• Experience designing, industrialising, or improving security processes and automated response capabilities.
• Strong cybersecurity principles with a relevant degree (or equivalent) and GIAC certification.
• Airbus supports personal growth with customised development solutions.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode as part of on‑call crisis team.
• Contribute to development of detection use cases and security tooling (SIEM/EDR).
• Design and coordinate incident response processes for SOC Level 1 and 2.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response.

Skills

Incident response

SOC/CSIRT experience

Forensic analysis

Threat detection

Security tooling

Education

Bachelor's degree or equivalent

GIAC certification (or equivalent)

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join our international CSIRT in Newport. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise detection use cases and tooling.

The role requires hands‑on technical work, on‑call crisis participation, and collaboration across global teams to align incident response processes and drive automation for threat detection.