{"id":3674425,"url":"https://alion.io/job/airbus-incident-response-analyst","title":"Incident Response Analyst","company":{"id":3100,"name":"Airbus","domain":"airbus.com","url":"https://alion.io/company/airbus","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":83,"open_postings":788,"ghost_share":0.005,"stale_share":0.671,"repost_share":0.015,"time_to_fill_p50_days":26,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Newport, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-03T10:18:36Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-04T08:33:47Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Description:\nSECURITY CLEARANCE: Must have or be able to obtain SC Security Clearance\nLOCATION: Newport (with some hybrid working available subject to our Hybrid Working Policy)\nTYPE: Full time\nWHAT'S IN IT FOR YOU\nFinancial Reward: Competitive salary, annual profit share, contributory pension, share options, car leasing scheme, free onsite parking, season ticket loan, tax-free technology scheme, discounted shopping and much more\nWork / Life Balance: 37 hour week, flexible working around core hours, hybrid working, up to 2 additional days per month as TOIL, option to buy/sell holiday. There are no core hours on Friday afternoons. Employees may use this flexibility at their discretion, provided they fulfil their contractual working hours and meet business needs (such as urgent deadlines or client requirements)\nPersonal Development: Personalised development plan, Airbus Leadership University and unlimited access to 10,000+ E-learning courses, internal mobility including international opportunities\nHealth & Wellbeing: Wellbeing benefits (including 24/7 online GP and mental health support), Employee Assistance Programme, discounted family health / dental insurance / eye tests, cycle-to-work scheme\nFamily and Caregiving: Life assurance, enhanced pay for maternity, paternity, adoption and shared parental leave and caregiving\nInclusive Environment: Wellbeing room, Multi-faith room, Employee Representative Groups (Gender, LGBTQ+, International, Generational, Disability, Social & Cultural Diversity, Neurodiversity)\nOur world is changing. And so are we. From our commitment to zero-carbon flight (#ZEROe) to cleaning up space, sustainability is at the heart of our purpose. So, what's your next change?\nAirbus Defence and Space is looking for a passionate and talented Incident Response Analyst to join our international Computer Security Incident Response Team (CSIRT) in Newport.\nThis is a highly technical, hands-on role where you will manage the entire lifecycle of security incidents and support Security Operation Center (SOC) service delivery.\nAutomation is a key target in our response activities, and your ideas will help drive our threat detection capabilities to a new dimension to secure our world-class enterprise.\nHOW YOU WILL CONTRIBUTE TO THE TE AM\nInvestigate SOC alerts and manage the full lifecycle of security incidents, performing comprehensive follow-up analysis to secure the business.\nSupport incident response in crisis mode as part of the on-call crisis team, executing technical host forensic analysis and reverse-engineering.\nContribute to the industrialisation of security tooling (SIEM, EDR), network and host analysis, and the development of new detection use cases.\nDesign, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2, ensuring seamless international alignment.\nDrive the continuous improvement of threat detection and response capabilities while supporting the SOC in its daily operations.\nExecute dedicated projects and tasks associated with advanced security monitoring, detection, and automated incident response workflows.\nABOUT YO U\nExperience of managing security incidents, monitoring SOC alerts, and utilising advanced security tooling within a highly technical SOC or CSIRT environment.\nExperience of performing technical host forensic analysis and reverse-engineering to support complex incident response activities.\nExperience of designing, industrialising, or improving security processes, threat detection use cases, and automated response capabilities.\nExperience of applying cyber security principles in a practical environment, backed by a relevant degree (or equivalent experience) and industry certifications such as GIAC.\nNot a 100% match? No worries! Airbus supports your personal growth with customised development solutions.\nHOW WE CAN SUPPORT YOU\nMany of our staff work flexibly in many different ways, including part-time. Please talk to us at interview about the flexibility you need and we’ll always do our best to accommodate your request.\nPlease let us know if you need us to make any adjustments for the selection process - you can share this with your Talent Acquisition Partner if you are invited to interview. Examples may include (but not exclusive to) accessible facilities; auxiliary aids; room layout, etc. Any information disclosed will be treated in the strictest confidence.\nAs a Disability Confident Employer, Airbus UK will offer an interview to any applicant that considers themselves to have a disability or long-term condition and meets the minimum criteria of the role (as set out in the job advert). To ‘opt in’, just select the option during your application submission and our Talent Acquisition team will contact you.\nLI:MF1\nThis job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.\nCompany:\nAIRBUS Defence and Space LimitedEmployment Type:\nPermanent-------\nExperience Level:\nProfessionalJob Family:\nCyber Security By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus.\nAirbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.\nAirbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to .\nAt Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.","description_format":"text","description_chars":5985,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Flexible schedule","Hybrid work","Parental leave","Stock options"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Aerospace Manufacturing","Satellite Manufacturing","Defense Manufacturing"],"lifecycle":[{"event":"open","at":"2026-11-03T10:18:36Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Service Supplier, Graduate Trainee)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Global Business Mobility: Service Supplier; Global Business Mobility: Graduate Trainee; Skilled Worker","cap_exempt":false,"checked_at":"2026-11-04T06:27:35+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":26,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/airbus-incident-response-analyst","json_url":"https://alion.io/job/airbus-incident-response-analyst.json","meta":{"generated_at":"2026-11-04T13:40:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20639,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3100},"rest":"https://alion.io/mcp/rest/get_company?id=3100"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fairbus-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fairbus-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fairbus-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/airbus-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fairbus-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3674425}},{"tool":"search_jobs","arguments":{"company":"airbus.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3674425},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}