Incident Response & CSIRT Analyst

Airbus S.A.S.; Newchurch; Hybrid; GBP 55,000 - 80,000; Full time

Benefits offered by this job

Profit sharing

Contributory pension

Share options

Car leasing

Free onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automated response and threat detection advancements.

The role requires hands‑on incident handling, forensic analysis, and development of new detection use cases within a highly technical SOC environment. Hybrid work is available; SC clearance may apply.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing, industrialising, or improving security processes and automated response capabilities.
• Degree in a relevant field; GIAC certification preferred.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of the on‑call crisis team, executing technical host forensic analysis.
• Industrialise security tooling (SIEM, EDR), network/host analysis, and development of new detection use cases.
• Design, implement and coordinate robust incident response processes for SOC Level 1 & 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities while supporting the SOC daily operations.
• Execute dedicated projects on advanced security monitoring, detection, and automated incident response workflows.

Skills

SOC/CSIRT experience

Forensic analysis

Incident response

Threat detection design

Security tooling (SIEM/EDR)

Security principles

Education

Degree in a relevant field

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space is seeking an Incident Response Analyst to join the international CSIRT in Newport. You will manage the full lifecycle of security incidents and support SOC service delivery, with a focus on automated response and threat detection advancements.

The role requires hands‑on incident handling, forensic analysis, and development of new detection use cases within a highly technical SOC environment. Hybrid work is available; SC clearance may apply.