Cyber Detection and Response Analyst, Asia Pacific

Control Risks; United States; Remote; USD 90,000 - 130,000; Full time

Job summary

Control Risks is seeking a Cyber Detection and Response Analyst to join a global 24/7 DART team. You will monitor, investigate, and respond to security events across endpoints, networks, cloud, and identities, applying MITRE ATT&CK and NIST frameworks.

This hands-on role supports continuous improvement of playbooks and incident reports, with on-call rotations and cross-team collaboration. The ideal candidate has 3–5 years in cybersecurity, hands-on SIEM/EDR experience, cloud familiarity, and

Qualifications

• 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense.
• Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).
• Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.
• Familiarity with threat hunting, malware analysis, or forensic investigation techniques.
• Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.
• Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.
• Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.

Responsibilities

• Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.

Skills

Incident response

SOC operations

Cyber defense

Threat hunting

MITRE ATT&CK

NIST

Education

Certifications (Security+, GCIH, GCIA)

Tools

Splunk

Sentinel

CrowdStrike

Job description

The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART). This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders.

This role will be a part of a global 24/7 team and will cover one of two shifts: Sunday-Thursday 08:00-16:00 or Tuesday-Saturday 08:00-16:00. This role will likely commence employment in October 2026.

Responsibilities:

• Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.

• Support incident response activities including analysis, containment, remediation, and documentation.

• Execute established incident response playbooks and contribute to their continuous improvement.

• Perform threat hunting activities to identify potential compromises and gaps in detection coverage.

• Leverage threat intelligence to inform investigations and detection tuning.

• Collaborate with Security Engineering to tune detection logic and improve security controls.

• Produce clear, concise incident reports and support root cause analysis and remediation efforts.

• Support on-call rotations and escalation processes as part of a 24/7 detection and response capability.

• 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense.

• Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).

• Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.

• Familiarity with threat hunting, malware analysis, or forensic investigation techniques.

• Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.

• Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.

• Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.

• Candidates will need to be be based in Australia and hold permanent work rights.