Incident Response Specialist - CSIRT & SOC Automation

Airbus S.A.S.; Westbourne; Hybrid; GBP 52,000 - 76,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing

Free parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

Job summary

Airbus Defence and Space in Newport seeks an Incident Response Analyst to join our international CSIRT. This highly technical, hands‑on role manages the full lifecycle of security incidents and supports SOC service delivery across our global enterprise.

You will investigate alerts, perform host forensic analysis, and contribute to automated detection and response workflows, with hybrid working options available.

Qualifications

• Experience of managing security incidents, monitoring SOC alerts, and using advanced security tooling in a technical SOC/CSIRT environment.
• Experience of host forensic analysis and reverse‑engineering to support incident response.
• Experience designing or improving security processes, threat detection use cases, and automated response capabilities.
• Bachelor’s degree or equivalent experience with industry certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Support incident response in crisis mode as part of the on‑call team.
• Contribute to tooling, detection use cases, and automation for incident response.
• Design, coordinate, and improve incident response processes for SOC Level 1 and 2.
• Drive threat detection and response improvements across the SOC.
• Lead projects related to advanced monitoring and automated response workflows.

Job description

Airbus Defence and Space in Newport seeks an Incident Response Analyst to join our international CSIRT. This highly technical, hands‑on role manages the full lifecycle of security incidents and supports SOC service delivery across our global enterprise.

You will investigate alerts, perform host forensic analysis, and contribute to automated detection and response workflows, with hybrid working options available.