Rodeo
ResourcesPartnersSign in

G-Research

Senior CSIRT Analyst

London
Posted about 14 hours ago
Sign up to applySee more jobs like this

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.

From our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas.

Security is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale.

Take the next step in your career.

The role

As a Senior CSIRT Analyst you will play a key role in G-Research’s Cyber Security Incident Response Team (CSIRT), specialising in cloud detection and response across AWS and hybrid environments.

You will investigate, respond and proactively hunt for threats across a diverse technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments.

You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating and improving the team’s effectiveness against advanced adversaries.

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

As a senior member of the team, you will also mentor junior analysts, contribute to automation initiatives and support the on-call escalation rota for out-of-hours response.

Key responsibilities of the role include:

  • Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environments
  • Proactively hunting for threats and developing detection logic across SIEM and cloud security systems
  • Participating in red and purple team exercises to test, validate and enhance detection and response capabilities
  • Developing and maintaining automation workflows using tools such as Tines and Python
  • Collaborating with engineering teams to improve log ingestion, detection rules and platform reliability
  • Mentoring and supporting junior analysts through knowledge sharing and technical guidance
  • Participating in the on-call escalation rota for out-of-hours incidents
  • Improving CSIRT processes, playbooks and threat models

Who are we looking for?

The ideal candidate will have the following skills and experience:

  • Significant experience in cyber incident response, detection engineering or SOC and CSIRT operations
  • Strong cloud security expertise across AWS and Azure, including hands-on incident investigation
  • Proficiency with SIEM platforms and log analysis
  • Experience with red and purple team exercises and adversary simulation
  • Knowledge of containerised environments and cloud-native infrastructure security
  • Programming or scripting experience, preferably in Python, and exposure to automation platforms
  • Strong understanding of modern attack techniques, threat actors and the MITRE ATT&CK framework
  • Experience mentoring or leading within a security operations environment
  • Strong analytical skills with the ability to investigate complex threats, identify root causes and operate effectively under pressure
  • Collaborative approach with the ability to work across teams while supporting and developing others
  • Proactive mindset with an interest in automation and continuously improving detection and response

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

Why should you apply?

  • Highly competitive compensation plus annual discretionary bonus
  • Lunch provided (via Just Eat for Business) and dedicated barista bar
  • 30 days’ annual leave
  • 9% company pension contributions
  • Informal dress code and excellent work/life balance
  • Comprehensive healthcare and life assurance
  • Cycle-to-work scheme
Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

Cyber Incident Response
Detection Engineering
Cloud Security
AWS
Azure
SIEM
Threat Hunting
Red Teaming
Purple Teaming
Python
Kubernetes
Container Security
MITRE ATT&CK
Automation
Tines
Log Analysis

Location

London, England, United Kingdom

Sign up to applySee more jobs like this