Senior Incident Response Analyst - CSIRT & Automation

Airbus S.A.S.; Hampstead Norreys; Hybrid; GBP 65,000 - 85,000; Full time

Benefits offered by this job

Profit share

Pension

Share options

Car leasing

Free parking

Season ticket loan

Tech scheme

Discounted shopping

TOIL

Flexible hours

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. You will manage the full lifecycle of security incidents, support SOC delivery, and help industrialise detection tooling with on‑call duties and crisis‑mode response.

The role emphasises automation, advanced threat detection, and cross‑border alignment, with a focus on robust incident handling and practical security improvements within a highly technical SOC/CSIRT environment.

Qualifications

• Experience managing security incidents in a SOC/CSIRT environment.
• Experience handling host forensic analysis and reverse‑engineering.
• Experience designing and improving security processes and detection use cases.
• Relevant degree or equivalent, GIAC or similar certifications.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Provide support in crisis mode as part of the on‑call team with forensics analysis.
• Industrialise security tooling (SIEM, EDR) and develop new detection use cases.
• Design and coordinate robust incident response processes for Level 1/2 SOC.
• Drive continuous improvement of threat detection and response capabilities.
• Execute projects related to advanced security monitoring and automated response.

Skills

Incident response

SOC operations

CSIRT

Threat detection

Automation

Forensics

Education

Bachelor's degree or equivalent

GIAC

Tools

SIEM

EDR

Reverse engineering tools

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join the international CSIRT. You will manage the full lifecycle of security incidents, support SOC delivery, and help industrialise detection tooling with on‑call duties and crisis‑mode response.

The role emphasises automation, advanced threat detection, and cross‑border alignment, with a focus on robust incident handling and practical security improvements within a highly technical SOC/CSIRT environment.