Senior CSIRT Analyst x2 London | £170k–£220k TC | Hybrid

Entasis Partners are working with a leading organisation looking to add two Senior CSIRT Analysts to an established and highly technical cyber security team. This isn’t your typical SOC role. You’ll be dealing with real security problems, digging into suspicious activity, hunting for threats and working out what happened, how it happened and, most importantly, what to do about it. You’ll sit across incident response, threat hunting, detection engineering and security operations, working closely with technical teams and other security specialists to keep improving the organisation’s ability to detect, investigate and respond.

What you’ll be doing:

• Investigating complex security incidents and figuring out what really happened
• Hunting for suspicious activity before it becomes a bigger problem
• Analysing logs, alerts and telemetry to uncover threats
• Building and improving detection capabilities
• Supporting investigations from initial alert through to remediation

We’re looking for someone who really understands security, rather than someone who simply knows how to follow a playbook. Your background could be in CSIRT, SOC, incident response, detection engineering, threat hunting, threat intelligence, red teaming or security engineering. You’ll ideally have experience with:

• Cyber security incident investigation and response
• Threat hunting and detection
• SIEM, security monitoring and log analysis
• Cloud or hybrid environments
• Modern attack techniques and adversary behaviour
• Security automation or scripting
• Threat modelling or adversary simulation
• Working closely with engineers and technical teams

You don’t need to tick every box. We’re more interested in how you think, how technically curious you are and how you approach difficult security problems. If you’re an experienced security professional looking for something more interesting than just working through alerts, we’d like to hear from you.