> Markdown version of [/jobs/ext/2021770-senior-csirt-analyst](https://www.wearedevelopers.com/jobs/ext/2021770-senior-csirt-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior CSIRT Analyst

- **Company:** G-Research
- **Location:** London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Automation of Tests, Microsoft Azure, Cloud Computing Security, Cyber Security, Computer Programming, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Automation of Marketing, Security Information and Event Management, Scripting, Cloud Platform System, Data Ingestion, Mitre Att&ck, Purple Team (Cyber Security)
- **Published:** August 11, 2026
- **Apply:** https://eu.experteer.com/career/view-jobs/senior-csirt-analyst-london-grossbritannien-58878899

## About the Role

cyber automation workflows using tools such as Tines and Python * Collaborate with engineering teams to improve log ingestion, detection rules and platform reliability * Mentor and support junior analysts through knowledge sharing and technical guidance * Participate in the on-call escalation rota for out-of-hours incidents * Improve CSIRT processes, playbooks and threat models Tasks * Significant experience in cyber incident response, detection engineering or SOC/CSIRT operations * Strong cloud security expertise across AWS and Azure, including hands-on incident investigation * Proficiency with SIEM platforms and log analysis * Experience with red and purple team exercises and adversary simulation * Knowledge of containerised environments and cloud-native infrastructure security * Programming or scripting experience, preferably in Python, and exposure to automation platforms * Strong understanding of modern attack techniques, threat actors and MITRE ATT&CK framework * Experience aaaaaaa
of or leading within a security operations environment * Strong analytical skills with the ability to investigate complex threats under pressure * Collaborative approach with cross-team working style * Proactive mindset with interest in automation and improving detection and response Key requirements * Highly competitive compensation * Lunch provided by Just Eat for Business * 30 days' annual leave * 9% company pension contributions * Comprehensive healthcare and life assurance * Cycle-to-work scheme

## Description

Experteer Overview As a Senior CSIRT Analyst, you will strengthen G-Research's Cyber Security Incident Response Team with expertise in cloud detection across AWS and hybrid environments. You'll investigate, respond, and proactively hunt threats across cloud, on-prem, and high-performance compute settings, using SIEM and cloud-native tooling. The role includes red/purple team exercises, automation development, and mentoring junior analysts while supporting on-call incidents. You'll collaborate with engineering to boost log ingestion, detection rules, and platform resilience. This is a hands-on, impact-driven position shaping security capabilities at scale. Pay / Benefits * Investigate and respond to complex security incidents across cloud, hybrid, and on-premise environments * Proactively hunt threats and develop detection logic across SIEM and cloud security systems * Participate in red and purple team exercises to test and enhance detection and response capabilities * Develop and maintain automation workflows using tools such as Tines and Python * Collaborate with engineering teams to improve log ingestion, detection rules and platform reliability * Mentor and support junior analysts through knowledge sharing and technical guidance * Participate in the on-call escalation rota for out-of-hours incidents * Improve CSIRT processes, playbooks and threat models Tasks * Significant experience in cyber incident response, detection engineering or SOC/CSIRT operations * Strong cloud security expertise across AWS and Azure, including hands-on incident investigation * Proficiency with SIEM platforms and log analysis * Experience with red and purple team exercises and adversary simulation * Knowledge of containerised environments and cloud-native infrastructure security * Programming or scripting experience, preferably in Python, and exposure to automation platforms * Strong understanding of modern attack techniques, threat actors and MITRE ATT&CK framework * Experience mentoring or leading within a security operations environment * Strong analytical skills with the ability to investigate complex threats under pressure * Collaborative approach with cross-team working style * Proactive mindset with interest in automation and improving detection and response Key requirements * Highly competitive compensation * Lunch provided by Just Eat for Business * 30 days' annual leave * 9% company pension contributions * Comprehensive healthcare and life assurance * Cycle-to-work scheme


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Leveraging Large Language Models for Legacy Code Translation: Challenges and Solutions](https://www.wearedevelopers.com/videos/1157-leveraging-large-language-models-for-legacy-code-translation-challenges-and-solutions)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)