# Cyber Detection and Response Analyst

**Company**: Control Risks
**Location**: San Francisco, California
**Work arrangement**: remote
**Experience**: senior
**Job type**: full-time
**Salary**: $120000-$140000 per year
**Category**: Security
**Industry**: Consulting

**Apply**: https://apply.workable.com/j/1775F5494E?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_bbcc6608-43e

## Description

The Cyber Detection and Response Analyst supports day-to-day detection, investigation, and response activities as part of a Cyber Detection and Response Team (DART).

This is a hands-on technical role focused on identifying, analyzing, and responding to cyber threats across the client’s environment, working closely with Security Engineering and broader security stakeholders.

This role will be a part of a 24/7 team and cover one of two shifts: Sunday-Thursday 9:00 am-5:00 pm PT or Tuesday-Saturday 9:00 am-5:00 pm PT.

Responsibilities:

- Monitor, triage, and investigate security alerts and events across endpoint, network, cloud, and identity systems.

- Support incident response activities including analysis, containment, remediation, and documentation.

- Execute established incident response playbooks and contribute to their continuous improvement.

- Perform threat hunting activities to identify potential compromises and gaps in detection coverage.

- Leverage threat intelligence to inform investigations and detection tuning.

- Collaborate with Security Engineering to tune detection logic and improve security controls.

- Produce clear, concise incident reports and support root cause analysis and remediation efforts.

- Support escalation processes as part of a 24/7 detection and response capability.

Requirements:

- 3–5 years of experience in cybersecurity, with a focus on incident response, SOC operations, or cyber defense.

- Hands-on experience with SIEM, EDR/XDR, and log analysis tools (e.g., Splunk, Sentinel, CrowdStrike).

- Practical understanding of incident response methodologies and frameworks such as MITRE ATT&CK and NIST.

- Familiarity with threat hunting, malware analysis, or forensic investigation techniques.

- Exposure to cloud environments (AWS, Azure, or GCP) and modern enterprise architectures is preferred.

- Strong analytical and problem-solving skills, with the ability to communicate technical findings clearly.

- Relevant certifications (e.g., Security+, GCIH, GCIA, or equivalent) are a plus.

Benefits:

- Control Risks offers a competitively positioned compensation and benefits package that is transparent and summarized in the full job offer.

- We operate a discretionary bonus scheme that incentivizes, and rewards individuals based on company and individual performance.

- Control Risks supports hybrid working arrangements, wherever possible, that emphasize the value of in-person time together - in the office and with our clients - while continuing to support flexible and remote working.

- Medical Benefits, Prescription Benefits, FSA, Dental Benefits, Vision Benefits, Life and AD&D, Voluntary Life and AD&D, Disability Benefits, Voluntary Benefits, 401 (K) Retirement, Nationwide Pet Insurance, Employee Assistance Program.

## Skills

### Required
- SIEM
- EDR/XDR
- log analysis
- incident response
- MITRE ATT&CK
- NIST
- threat hunting
- malware analysis
- forensic investigation
- cloud environments

### Nice to have
- AWS
- Azure
- GCP
- Security+
- GCIH
- GCIA

---

Source: [Apply at apply.workable.com](https://apply.workable.com/j/1775F5494E?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)