SC-Cleared Incident Response Engineer

Airbus SE; Newport; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Annual profit share

Contributory pension

Car leasing

Free parking

Season ticket loan

Tech scheme

Discount shopping

Hybrid working

Flexible hours

Job summary

Airbus Defence and Space Limited in Newport is seeking a passionate Incident Response Analyst to join our international CSIRT. This hands-on role manages the full lifecycle of security incidents and supports SOC service delivery.

You'll work on automating detection capabilities, SIEM/EDR tooling, and coordinate incident response across international teams, with hybrid working and professional development opportunities.

Qualifications

• Experience managing security incidents in a SOC/CSIRT environment.
• Experience performing host forensic analysis and reverse engineering.
• Experience designing, industrialising, or improving security processes and automated response capabilities.
• Knowledge of cyber security principles with relevant certifications such as GIAC.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents, performing follow-up analysis.
• Support incident response in crisis mode as part of the on-call crisis team, performing technical host forensic work.
• Contribute to industrialising security tooling (SIEM, EDR) and developing detection use cases.
• Design, implement, and coordinate robust incident response processes for SOC Level 1 and 2 across teams.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated incident response workflows.

Skills

Incident response

SOC tooling

Forensic analysis

Reverse engineering

Threat detection

Education

Relevant degree

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space Limited in Newport is seeking a passionate Incident Response Analyst to join our international CSIRT. This hands-on role manages the full lifecycle of security incidents and supports SOC service delivery.

You'll work on automating detection capabilities, SIEM/EDR tooling, and coordinate incident response across international teams, with hybrid working and professional development opportunities.