Incident Response & Threat Hunting Analyst

Airbus S.A.S.; Saffron Walden; Hybrid; GBP 65,000 - 105,000; Full time

Benefits offered by this job

Competitive salary

Profit share

Pension plan

Share options

Onsite parking

Season ticket loan

Tech scheme

Hybrid working

TOIL

Job summary

Airbus is seeking a highly capable Security Operations professional to join the Newport team on a hybrid basis. You will investigate security incidents, manage full incident lifecycles, and support crisis response with host forensic analysis and reverse engineering.

You'll design and industrialise detection use cases, improve incident response processes, and drive ongoing enhancements to threat detection capabilities across global operations. A relevant degree and GIAC certification are valued.

Qualifications

• Experience of managing security incidents, monitoring SOC alerts, and utilising advanced security tooling within a highly technical SOC or CSIRT environment.
• Experience of performing technical host forensic analysis and reverse‑engineering to support complex incident response activities.
• Experience of designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.
• Experience of applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and industry certifications such as GIAC.
• This job requires an awareness of any potential compliance risks and a commitment to act with integrity.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing follow‑up analysis to secure the business.
• Support incident response in crisis mode as part of on‑call crisis team, performing host forensic analysis and reverse‑engineering.
• Contribute to industrialisation of security tooling (SIEM, EDR) and development of new detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2 with international alignment.
• Drive continuous improvement of threat detection and response capabilities while supporting daily SOC operations.
• Execute projects related to advanced security monitoring, detection, and automated incident response workflows.

Skills

Incident response

SOC/CSIRT

Threat detection

Forensic analysis

Reverse engineering

Security tooling

Compliance awareness

Education

Bachelor's in Cyber Security or related field

GIAC Certification

Tools

SIEM

EDR

Forensic tooling

Job description

Airbus is seeking a highly capable Security Operations professional to join the Newport team on a hybrid basis. You will investigate security incidents, manage full incident lifecycles, and support crisis response with host forensic analysis and reverse engineering.

You'll design and industrialise detection use cases, improve incident response processes, and drive ongoing enhancements to threat detection capabilities across global operations. A relevant degree and GIAC certification are valued.