Incident Response Engineer – CSIRT & Automation

Airbus S.A.S.; Funtington; Hybrid; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Profit sharing

Pension scheme

Car leasing scheme

Free onsite parking

Season ticket loan

Discounted shopping

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents and support SOC service delivery, helping industrialise tooling with SIEM/EDR for a world‑class enterprise.

This hands‑on role requires experience with host forensics, threat detection development, and incident response design, with hybrid working options to suit your needs.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT environment.
• Ability to perform host forensic analysis and reverse‑engineering.
• Experience designing security processes and automated response use cases.

Responsibilities

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Support incident response in crisis mode and perform host forensics.
• Industrialise security tooling (SIEM, EDR) and develop detection use cases.
• Design and coordinate incident response processes for Level 1/2 SOC.
• Drive continuous improvement of threat detection and response capabilities.

Skills

Security incident management

SOC monitoring

Threat detection

Incident response

Reverse engineering

Education

Degree in CS/IT or related field

GIAC Certification

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents and support SOC service delivery, helping industrialise tooling with SIEM/EDR for a world‑class enterprise.

This hands‑on role requires experience with host forensics, threat detection development, and incident response design, with hybrid working options to suit your needs.