Incident Response Specialist - SOC & Automation

Airbus S.A.S.; Bisterne; Hybrid; GBP 55,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Annual profit share

Contributory pension

Share options

Car leasing scheme

Free onsite parking

Season ticket loan

Hybrid working

Job summary

Airbus Defence and Space in Newport, UK, is seeking an Incident Response Analyst to join the international CSIRT. This highly technical role manages the full lifecycle of security incidents and supports SOC service delivery.

You will contribute to security tooling automation, develop new detection use cases, and coordinate incident response processes across SOC levels 1 and 2. On‑call crisis support and a focus on threat detection are central to the role.

Qualifications

• Experience managing security incidents in a technical SOC/CSIRT
• Technical host forensic analysis and reverse‑engineering experience
• Experience designing or improving security processes and automated response capabilities
• Practical understanding of cyber security principles with a relevant degree or equivalent, plus industry certifications such as GIAC

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents
• Perform host forensic analysis during on‑call crisis situations
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases
• Design, implement and coordinate incident response processes for SOC Level 1 and 2
• Drive continuous improvement of threat detection and response capabilities
• Lead projects on advanced security monitoring and automated incident response workflows

Skills

SOC experience

Incident response

Forensic analysis

Reverse engineering

Security tooling

Threat detection

Education

Security degree

GIAC certification

Tools

SIEM

EDR

Forensic tools

Job description

Airbus Defence and Space in Newport, UK, is seeking an Incident Response Analyst to join the international CSIRT. This highly technical role manages the full lifecycle of security incidents and supports SOC service delivery.

You will contribute to security tooling automation, develop new detection use cases, and coordinate incident response processes across SOC levels 1 and 2. On‑call crisis support and a focus on threat detection are central to the role.