Senior CSIRT Analyst

In this role you will bolster G-Research’s CSIRT, focusing on cloud detection and response across AWS and hybrid environments. You will investigate, respond, and proactively hunt threats while collaborating with engineering teams to improve visibility and resilience. You will mentor juniors, help drive automation, and participate in on-call incident handling. This is a hands-on opportunity to strengthen security at scale for a world-class research platform.

• competitive compensation plus annual discretionary bonus
• lunch provided
• 30 days’ annual leave
• 9% company pension contributions
• healthcare and life assurance
• cycle-to-work scheme

• Investigate and respond to complex security incidents across cloud, hybrid, and on-premise environments
• Proactively hunt for threats and develop detection logic across SIEM and cloud security systems
• Participate in red and purple team exercises to test, validate and enhance detection and response capabilities
• Develop and maintain automation workflows using tools such as Tines and Python
• Collaborate with engineering teams to improve log ingestion, detection rules and platform reliability
• Mentor and support junior analysts through knowledge sharing and guidance
• Participate in the on-call escalation rota for out-of-hours incidents
• Improve CSIRT processes, playbooks and threat models

• Significant experience in cyber incident response, detection engineering or SOC and CSIRT operations
• Strong cloud security expertise across AWS and Azure, including hands-on incident investigation
• Proficiency with SIEM platforms and log analysis
• Experience with red and purple team exercises and adversary simulation
• Knowledge of containerised environments and cloud-native infrastructure security
• Programming or scripting experience, preferably in Python, and exposure to automation platforms
• Strong understanding of modern attack techniques, threat actors and the MITRE ATT&CK framework
• Experience mentoring or leading within a security operations environment
• Strong analytical skills with the ability to investigate complex threats, identify root causes and operate effectively under pressure
• Collaborative approach with the ability to work across teams while supporting and developing others
• Proactive mindset with an interest in automation and continuously improving detection and response

• Collaborative
• Mentoring
• Under pressure performance
• Cloud security (AWS and Azure)
• SIEM and log analysis
• Red and purple team exercise experience