Hands-on Cyber Threat Detection & Response Analyst - 24/7

Control Risks; San Francisco (CA); Hybrid; USD 120,000 - 140,000; Full time

Benefits offered by this job

Medical Benefits

401(k) Retirement

Hybrid work

Discretionary bonus

Job summary

Control Risks is seeking a Cyber Detection and Response Analyst in California to join a 24/7 DART. The role focuses on hands‑on detection, investigation, and response across endpoints, networks, and cloud environments.

You will work with Security Engineering and stakeholders to improve detection and response efficacy. Responsibilities include monitoring alerts, running incident response playbooks, threat hunting, and producing clear incident reports.

Qualifications

• 3–5 years of cybersecurity experience focused on incident response or SOC operations.
• Hands-on with SIEM, EDR/XDR, and log analysis tools (Splunk, Sentinel, CrowdStrike).
• Familiarity with MITRE ATT&CK and NIST frameworks; threat hunting and malware analysis skills.

Responsibilities

• Monitor, triage, and investigate security alerts across endpoints, networks, cloud, and identity systems.
• Support incident response activities including analysis, containment, remediation, and documentation.
• Execute incident response playbooks and contribute to their improvement.
• Perform threat hunting to identify compromises and coverage gaps.
• Leverage threat intelligence to inform investigations and tuning.
• Collaborate with Security Engineering to improve detection logic and controls.
• Produce incident reports and support root cause analysis and remediation.
• Support 24/7 escalation processes as part of the SOC capability.

Skills

Incident response

SOC operations

Threat hunting

Analytical thinking

Communication of findings

MITRE ATT&CK

NIST frameworks

Cloud environments

Security certifications

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Job description

Control Risks is seeking a Cyber Detection and Response Analyst in California to join a 24/7 DART. The role focuses on hands‑on detection, investigation, and response across endpoints, networks, and cloud environments.

You will work with Security Engineering and stakeholders to improve detection and response efficacy. Responsibilities include monitoring alerts, running incident response playbooks, threat hunting, and producing clear incident reports.