Senior CSIRT Analyst: Cloud Detection & Response Lead

Alastair LLP; Greater London; On-site; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Lunch provided

Barista bar

35 days leave

Company pension

Healthcare

Cycle-to-work

Monthly events

Job summary

G-Research in London is seeking a Senior CSIRT Analyst to join the Cyber Security Incident Response Team, specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt for threats across a diverse technology landscape.

As a senior member, you will mentor junior analysts, contribute to automation initiatives, support the on-call escalation rota, and work with Elastic, Azure and AWS to strengthen detection and response

Qualifications

• Significant experience in cyber incident response, detection engineering or SOC and CSIRT operations.
• Strong cloud security expertise across AWS and Azure, including hands-on incident investigation.
• Proficiency with SIEM platforms and log analysis.
• Experience with red and purple team exercises and adversary simulation.
• Knowledge of containerised environments and cloud-native infrastructure security.
• Programming or scripting experience, preferably in Python, and exposure to automation platforms.
• Strong understanding of modern attack techniques, threat actors and the MITRE ATT&CK framework.
• Experience mentoring or leading within a security operations environment.

Responsibilities

• Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environments
• Proactively hunting for threats and developing detection logic across SIEM and cloud security systems
• Participating in red and purple team exercises to test, validate and enhance detection and response capabilities
• Developing and maintaining automation workflows using tools such as Tines and Python
• Collaborating with engineering teams to improve log ingestion, detection rules and platform reliability
• Mentoring and supporting junior analysts through knowledge sharing and technical guidance
• Participating in the on-call escalation rota for out-of-hours incidents
• Improving CSIRT processes, playbooks and threat models

Skills

Cyber incident response

Cloud security (AWS/Azure)

SIEM proficiency

Red/Purple team exercises

Python scripting

Automation

Mentoring/leadership

MITRE ATT&CK

Tools

Elastic SIEM

AWS

Azure

Python

Job description

G-Research in London is seeking a Senior CSIRT Analyst to join the Cyber Security Incident Response Team, specialising in cloud detection and response across AWS and hybrid environments. You will investigate, respond and proactively hunt for threats across a diverse technology landscape.

As a senior member, you will mentor junior analysts, contribute to automation initiatives, support the on-call escalation rota, and work with Elastic, Azure and AWS to strengthen detection and response