Monitor, triage, and investigate security alerts across endpoints, network, cloud, and identity. Support incident response, containment, remediation, and documentation. Execute and improve IR playbooks, perform threat hunting, leverage threat intelligence, tune detections with Security Engineering, produce incident reports, and participate in 24/7 on-call rotations.
The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analysing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders.
This role will be a part of a 24/7 team and cover one of two shifts: Sunday-Thursday 9:00 am-5:00 pm GMT or Tuesday-Saturday 9:00 am-5:00 pm GMT
Requirements
Responsibilities
- Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.
- Support incident response activities including analysis, containment, remediation, and documentation.
- Execute established incident response playbooks and contribute to their continuous improvement.
- Perform threat hunting activities to identify potential compromises and gaps in detection coverage.
- Leverage threat intelligence to inform investigations and detection tuning.
- Collaborate with Security Engineering to tune detection logic and improve security controls.
- Produce clear, concise incident reports and support root cause analysis and remediation efforts.
- Support on-call rotations and escalation processes as part of a 24/7 detection and response capability.
Qualifications
- 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense.
- Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).
- Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.
- Familiarity with threat hunting, malware analysis, or forensic investigation techniques.
- Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.
- Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
- Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.
Control Risks London, England Office
Cottons Centre, Cottons Lane, London, United Kingdom, SE1 2QG
Similar Jobs
Artificial Intelligence • Cloud • Sales • Security • Software • Cybersecurity • Data Privacy
The Customer Success Manager at SailPoint ensures client satisfaction and loyalty, manages business relationships, and provides coaching on SailPoint solutions. This role includes monitoring account performance, facilitating renewals, and expanding product use.
Top Skills:
GainsightSalesforceServicenowTableau
Blockchain • Fintech • Payments • Consulting • Cryptocurrency • Cybersecurity • Quantum Computing
Lead SME-focused fintech issuer sales across UK&I, partnering with account, product and services teams to identify, qualify and close SME issuing, embedded finance and spend-management deals. Build value propositions, manage pipeline in SFDC, develop business cases, provide market intelligence, and drive cross-functional execution to grow Mastercard revenue in the SME segment.
Top Skills:
SalesforceSFDC
Fintech • Financial Services
Originates, structures, and sells complex open-account financing solutions, including supplier finance, key account purchase, and accounts receivable securitization. Partners with Commercial Banking relationship managers and client teams, advises on transactions, leads cross-functional deal execution, submits opportunities for approval, and grows product penetration. Serves as a senior product advisor to leadership, supports strategic initiatives, engages CFOs and treasurers, and mentors less experienced colleagues.
Top Skills:
A/R SecuritizationAsset-Based Lending (Abl)FactoringKey Account PurchaseSupplier Finance
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
