Incident Response Pro: CSIRT, Forensics & Automation

Airbus S.A.S.; Aldsworth; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Profit share

Pension

Share options

Car leasing

Onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport seeks an Incident Response Analyst to manage security incidents end-to-end within a global CSIRT. This highly technical, hands-on role focuses on incident lifecycle, host forensics, SIEM/EDR tooling, and improving detection capabilities.

You will join an international SOC, work on on-call rotations, and contribute to robust incident response processes while aligning with our hybrid working policy. A relevant degree and GIAC certification are desirable.

Qualifications

• Experience in managing security incidents, monitoring SOC alerts and using advanced tooling in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse‑engineering to support incident response.
• Experience designing/improving security processes, threat detection use cases, and automated responses.
• Practical cybersecurity knowledge with a relevant degree or equivalent experience; GIAC certification is advantageous.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents with follow‑up analysis.
• Support incident response in crisis mode as part of on‑call team, including host forensics.
• Industrialise security tooling (SIEM, EDR), and develop detection use cases.
• Design and coordinate robust incident response processes for SOC Level 1 and 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities across daily SOC operations.
• Execute projects related to advanced monitoring and automated incident response workflows.

Skills

Incident response

SOC analysis

Forensic analysis

Reverse engineering

Security tooling

Threat detection

CSIRT processes

Education

Bachelor's degree or equivalent

GIAC certification

Tools

SIEM

EDR

Threat hunting tools

Job description

Airbus Defence and Space in Newport seeks an Incident Response Analyst to manage security incidents end-to-end within a global CSIRT. This highly technical, hands-on role focuses on incident lifecycle, host forensics, SIEM/EDR tooling, and improving detection capabilities.

You will join an international SOC, work on on-call rotations, and contribute to robust incident response processes while aligning with our hybrid working policy. A relevant degree and GIAC certification are desirable.