Incident Response Analyst
Core
Manage the full lifecycle of security incidents, perform technical host forensic analysis and reverse-engineering, and support SOC service delivery for Airbus Defence and Space.
Role type
Senior IC incident response analyst (CSIRT)
Builds
Automated incident response workflows, new detection use cases, and robust incident response processes for SOC Level 1 and Level 2.
Domain
Cybersecurity / Defense and Space
Deliverable
production ML models
Required skills
Security incident management, SOC alert monitoring, technical host forensic analysis, reverse-engineering, security process design, threat detection use case development, automated response capability implementation, SIEM/EDR tooling, network and host analysis.
Preferred skills
Industry certifications (e.g., GIAC), relevant degree.
Technologies
SIEM, EDR
Responsibilities
Investigate SOC alerts and manage the full lifecycle of security incidents; Support incident response in crisis mode executing technical host forensic analysis and reverse-engineering; Contribute to the industrialisation of security tooling and development of new detection use cases; Design, implement, and coordinate robust incident response processes for SOC Level 1 and Level 2; Drive the continuous improvement of threat detection and response capabilities; Execute dedicated projects and tasks associated with advanced security monitoring and automated incident response workflows.
