Security Detection & Response Analyst roles

There are multiple Security Detection and Response Analyst roles (Level 1 and Level 2) available with a large financial services organisation.

These roles have onsite requirement for 4 days.

Responsibilities:

• Threat Detection & Engineering: Build, tune, and optimize high-quality detection logic mapped to the MITRE ATT&CK framework to maximize coverage and minimize false positives.

• Incident Investigation & Response: Analyze logs and telemetry to determine attack scope and root causes, while executing containment, isolation, and remediation during active security events.

• Automation & Metrics Optimization: Maintain and improve SOAR workflows, automated playbooks, and AI enhancements to reduce manual effort and measurably improve MTTR and signal-to-noise ratios.

• Documentation & Stakeholder Communication: Document security incident findings, construct timelines, deliver clear updates to stakeholders, and conduct post-incident reviews to capture lessons learned.

• Continuous Improvement & Mentorship: Identify monitoring gaps to drive operational maturity, integrate partner use cases, and guide junior team members toward their professional development goals.

Requirements:

• Build, tune, and optimize high-quality detection logic mapped to the MITRE ATT&CK framework to maximize coverage and minimize false positives.

• Analyze logs and telemetry to determine attack scope and root causes, while executing containment, isolation, and remediation during active security events.

• Maintain and improve SOAR workflows, automated playbooks, and AI enhancements to reduce manual effort and measurably improve MTTR and signal-to-noise ratios.

• Document security incident findings, construct timelines, deliver clear updates to stakeholders, and conduct post-incident reviews to capture lessons learned.