Monitor, triage, and investigate security alerts across endpoints, network, cloud, and identity. Support incident response, containment, remediation, and documentation. Execute and improve IR playbooks, perform threat hunting, leverage threat intelligence, tune detections with Security Engineering, produce incident reports, and participate in 24/7 on-call rotations.
The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analysing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders.
This role will be a part of a 24/7 team and cover one of two shifts: Sunday-Thursday 9:00 am-5:00 pm GMT or Tuesday-Saturday 9:00 am-5:00 pm GMT
Requirements
Responsibilities
- Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.
- Support incident response activities including analysis, containment, remediation, and documentation.
- Execute established incident response playbooks and contribute to their continuous improvement.
- Perform threat hunting activities to identify potential compromises and gaps in detection coverage.
- Leverage threat intelligence to inform investigations and detection tuning.
- Collaborate with Security Engineering to tune detection logic and improve security controls.
- Produce clear, concise incident reports and support root cause analysis and remediation efforts.
- Support on-call rotations and escalation processes as part of a 24/7 detection and response capability.
Qualifications
- 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense.
- Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).
- Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.
- Familiarity with threat hunting, malware analysis, or forensic investigation techniques.
- Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.
- Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
- Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.
Control Risks London, England Office
Cottons Centre, Cottons Lane, London, United Kingdom, SE1 2QG
Similar Jobs
Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Analyze adversary activity and communicate findings to customers. Conduct threat hunting and intrusion analysis using endpoint telemetry, network and host-based analysis, digital forensics, and cyber threat intelligence. Research nation-state adversaries, improve detection capabilities, and support security investigations. The role also involves customer communication, tool development, cross-functional collaboration, and using AI technologies to improve workflows and decision-making.
Top Skills:
AICrowdstrike FalconEndpoint TelemetryLinuxmacOSWindows
Fintech • Payments • Software
Own full-cycle technical recruiting across EMEA for engineering, platform, data, AI, security, product, and technical leadership roles. Partner with senior leaders on hiring plans, sourcing strategies, assessment design, market intelligence, candidate experience, and offer closing. Build inclusive talent pipelines, use AI-enabled recruiting workflows and analytics, maintain ATS data quality, and improve hiring velocity and quality across regulated technology markets.
Top Skills:
Ai-Enabled Recruiting ToolsAts PlatformsLinkedin RecruiterRecruiting AnalyticsTalent Intelligence Tools
An Hour Ago
Big Data • Food • Hardware • Machine Learning • Retail • Automation • Manufacturing
Engineering internship focused on process development, modelling and simulation for confectionery manufacturing. Responsibilities include managing project tracks, planning and running trials, preparing technical reports, developing commissioning and validation plans, presenting to stakeholders, and supporting factory deployments. Interns may use CFD, FEA, first-principles methods, Python, CAD, and statistical analysis to reduce physical trials and optimize manufacturing processes. Occasional overseas travel may support plant trials and commissioning.
Top Skills:
3D Cad ModellingCfdFeaMS OfficePython
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
