Senior Incident Response Analyst — CSIRT (Hybrid)

Airbus S.A.S.; West Thorney; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Competitive salary

Profit share

Pension

Share options

Car leasing

Onsite parking

Season ticket loan

Tax-free technology scheme

Discounted shopping

TOIL

Flexible holidays

Health benefits

Life assurance

Parental leave

Job summary

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, from detection to remediation, supporting SOC service delivery in a highly technical environment.

The role emphasizes automation and tooling, with opportunities to develop new detection use cases and enhance incident response capabilities. A security clearance (SC) is required or obtainable, and a hybrid work model is available.

Qualifications

• Experience managing security incidents and monitoring SOC alerts in a technical SOC/CSIRT.
• Experience performing host forensic analysis and reverse engineering.
• Experience designing security processes, detection use cases and automated responses.
• Strong cybersecurity fundamentals with a relevant degree or equivalent experience; GIAC certification preferred.

Responsibilities

• Investigate SOC alerts and manage the full lifecycle of security incidents.
• Provide on-call incident response, conducting host forensic analysis and reverse engineering.
• Industrialise security tooling (SIEM/EDR), and develop detection use cases.
• Design and coordinate incident response processes for SOC Levels 1 and 2 across international teams.
• Improve threat detection and response capabilities and support daily SOC operations.
• Lead projects on advanced security monitoring and automated incident response workflows.

Skills

SOC/CSIRT experience

Forensic analysis

Threat detection design

Cybersecurity fundamentals

Education

Degree in CS/IT

GIAC certification

Tools

SIEM

EDR

Job description

Airbus Defence and Space in Newport is seeking an Incident Response Analyst to join our international CSIRT. You will manage the full lifecycle of security incidents, from detection to remediation, supporting SOC service delivery in a highly technical environment.

The role emphasizes automation and tooling, with opportunities to develop new detection use cases and enhance incident response capabilities. A security clearance (SC) is required or obtainable, and a hybrid work model is available.