Cyber Detection & Response Deputy Team Lead (24/7)

Control Risks; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Control Risks is seeking a Cyber Detection and Response Deputy Team Lead to serve as the operational second-in-command of the DART. You will bridge hands-on cyber operations with leadership, supporting the Team Lead in maturing detection and response capabilities for clients.

The role entails threat detection, incident response, threat hunting, and detection engineering, with supervisory responsibilities and escalation duties across day-to-day security operations, including out-of-hours coverage.

Qualifications

• 7+ years in cybersecurity with incident response or SOC operations.
• Mentoring analysts and leading investigations or serving as a technical lead.
• Hands-on with SIEM/EDR/IDS/IPS and cloud security tech.
• Familiarity with Splunk, Sentinel, CrowdStrike and related tools.
• Knowledge of MITRE ATT&CK, NIST CSF and IR best practices.
• Experience in 24/7 operations and on-call rotations.
• Strong analytical and problem-solving skills.
• Ability to communicate complex concepts to diverse audiences.

Responsibilities

• Serve as primary escalation point during shifts and after-hours.
• Lead investigations into high-severity cyber incidents, ensuring containment and remediation.
• Oversee triage across endpoint, network, cloud, and identity environments.
• Conduct advanced threat hunting to identify emerging threats and gaps in coverage.
• Support incident response with forensic analysis and remediation planning.
• Collaborate with Security Engineering to improve detection logic and tooling.
• Act as Team Lead during absences or out-of-hours coverage.
• Review investigation quality and reporting standards.
• Provide performance feedback and development planning.

Skills

Incident response

SOC operations

Threat hunting

Technical lead

SIEM & EDR

Cloud security

Automation mindset

Team mentoring

Communication

Tools

Splunk

Microsoft Sentinel

CrowdStrike

SentinelOne

Palo Alto

Microsoft Defender

Job description

Control Risks is seeking a Cyber Detection and Response Deputy Team Lead to serve as the operational second-in-command of the DART. You will bridge hands-on cyber operations with leadership, supporting the Team Lead in maturing detection and response capabilities for clients.

The role entails threat detection, incident response, threat hunting, and detection engineering, with supervisory responsibilities and escalation duties across day-to-day security operations, including out-of-hours coverage.