{"id":774829,"url":"https://alion.io/job/g-research-senior-csirt-analyst","title":"Senior CSIRT Analyst","company":{"id":445185,"name":"G-Research","domain":"gresearch.com","url":"https://alion.io/company/g-research","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":94,"open_postings":61,"ghost_share":0.016,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":100,"computed_at":"2026-11-15T07:52:55Z"}},"role":"Analytics","role_family":"Analytics","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":63000,"max_usd":119000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":68},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Kubernetes","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"Red Teaming","optional":false},{"name":"SIEM","optional":false},{"name":"Tines","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-17T00:00:00Z","employer_posted_date":"2026-08-17","last_verified_at":"2026-11-15T20:55:36Z","board_verified":true,"closed_at":null,"days_open":90,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":89},"description":"We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.\nFrom our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas.\nSecurity is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale.\nTake the next step in your career.\nThe role\nAs a Senior CSIRT Analyst you will play a key role in G-Research’s Cyber Security Incident Response Team (CSIRT), specialising in cloud detection and response across AWS and hybrid environments.\nYou will investigate, respond and proactively hunt for threats across a diverse technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments.\nYou will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating and improving the team’s effectiveness against advanced adversaries.\nAs a senior member of the team, you will also mentor junior analysts, contribute to automation initiatives and support the on-call escalation rota for out-of-hours response.\nKey responsibilities of the role include:\nInvestigating and responding to complex security incidents across cloud, hybrid, and on-premise environments\n\nProactively hunting for threats and developing detection logic across SIEM and cloud security systems\n\nParticipating in red and purple team exercises to test, validate and enhance detection and response capabilities\n\nDeveloping and maintaining automation workflows using tools such as Tines and Python\n\nCollaborating with engineering teams to improve log ingestion, detection rules and platform reliability\n\nMentoring and supporting junior analysts through knowledge sharing and technical guidance\n\nParticipating in the on-call escalation rota for out-of-hours incidents\n\nImproving CSIRT processes, playbooks and threat models\n\nWho are we looking for?\nThe ideal candidate will have the following skills and experience:\nSignificant experience in cyber incident response, detection engineering or SOC and CSIRT operations\n\nStrong cloud security expertise across AWS and Azure, including hands-on incident investigation\n\nProficiency with SIEM platforms and log analysis\n\nExperience with red and purple team exercises and adversary simulation\n\nKnowledge of containerised environments and cloud-native infrastructure security\n\nProgramming or scripting experience, preferably in Python, and exposure to automation platforms\n\nStrong understanding of modern attack techniques, threat actors and the MITRE ATT&CK framework\n\nExperience mentoring or leading within a security operations environment\n\nStrong analytical skills with the ability to investigate complex threats, identify root causes and operate effectively under pressure\n\nCollaborative approach with the ability to work across teams while supporting and developing others\n\nProactive mindset with an interest in automation and continuously improving detection and response\n\n Why should you apply?\nHighly competitive compensation plus annual discretionary bonus\n\nLunch provided (via Just Eat for Business) and dedicated barista bar\n\n35 days’ annual leave\n\n9% company pension contributions\n\nInformal dress code and excellent work/life balance\n\nComprehensive healthcare and life assurance\n\nCycle-to-work scheme\n\nMonthly company events\n\nG-Research is committed to cultivating and preserving an inclusive work environment. We are an ideas-driven business and we place great value on diversity of experience and opinions.\nWe want to ensure that applicants receive a recruitment experience that enables them to perform at their best. If you have a disability or special need that requires accommodation please let us know in the relevant section","description_format":"text","description_chars":4139,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Company events"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Machine Learning","Hedge Funds & Alternative Investments"],"lifecycle":[{"event":"open","at":"2026-09-11T22:36:51Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-15T09:21:55+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":1,"p_active":0.89,"p_room":0.6,"age_days":90,"expected_fill_days":100,"reasons":["conf:4","velocity","win:late","crowd:"],"computed_at":"2026-11-15T07:52:55Z"},"pay":null,"html_url":"https://alion.io/job/g-research-senior-csirt-analyst","json_url":"https://alion.io/job/g-research-senior-csirt-analyst.json","meta":{"generated_at":"2026-11-15T22:28:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18385,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":445185},"rest":"https://alion.io/mcp/rest/get_company?id=445185"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fg-research-senior-csirt-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fg-research-senior-csirt-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fg-research-senior-csirt-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/g-research-senior-csirt-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fg-research-senior-csirt-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":774829}},{"tool":"search_jobs","arguments":{"company":"gresearch.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":774829},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}