Incident Response Lead – CSIRT Automation and Detection

Airbus S.A.S.; Buckingham; Híbrido; GBP 60.000 - 82.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Profit sharing

Pension plan

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Tax-free tech scheme

Discounted shopping

Wellbeing benefits

10,000+ E-learning courses

Descripción de la vacante

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise security tooling across SIEM and EDR.

This hands-on role requires experience in incident handling, forensic analysis, and developing detection use cases. We offer on-going development, flexible working options, and a strong commitment to security and innovation.

Formación

• Experience handling security incidents in a technical SOC or CSIRT.
• Proficiency with host forensic analysis and reverse engineering.
• Experience designing or improving security processes and detection use cases.

Responsabilidades

• Investigate SOC alerts and manage full lifecycle of security incidents.
• Provide on‑call incident response in crisis mode and perform host forensics.
• Industrialise security tooling and develop new detection use cases for SIEM/EDR.
• Design and coordinate incident response processes for SOC Levels 1 and 2.

Conocimientos

Incident response

SOC/CSIRT

Forensic analysis

Reverse engineering

Threat detection

Cyber security principles

Educación

Bachelor's degree in cyber security or related field

Herramientas

SIEM

EDR

Descripción del empleo

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, support SOC service delivery, and help industrialise security tooling across SIEM and EDR.

This hands-on role requires experience in incident handling, forensic analysis, and developing detection use cases. We offer on-going development, flexible working options, and a strong commitment to security and innovation.