Senior Cybersecurity Incident Responder

1001 LEGO System A/S; Billund; Híbrido; DKK 900.000 - 1.400.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Family care leave

Life and disability insurance

Wellbeing programs

Colleague discount

Bonus scheme

Descripción de la vacante

The LEGO Group is seeking a Senior Cybersecurity Incident Responder to join the Threat Detection & Response team within Digital Security in Billund, Denmark. You will lead major incidents from detection to recovery, strengthen playbooks and detection capabilities, and collaborate with engineers, analysts, and stakeholders across the enterprise.

You will mentor teammates, drive automation initiatives, and help advance a mature cyber defence function backed by strong support and investment.

Formación

• Led major security incidents from detection through resolution and post-incident review.
• Conducted cybersecurity log analysis to investigate and resolve security incidents.
• Designed enterprise-grade security operations workflows that improved security operations effectiveness.
• Led incident response in a global enterprise environment.
• Identified and implemented automation opportunities within security operations processes.

Responsabilidades

• Lead major security incidents from initial detection through recovery and post-incident review.
• Improve playbooks, workflows, and operational processes that strengthen response effectiveness.
• Research and evaluate new detection techniques to keep capabilities ahead of evolving threats.
• Create automation opportunities that reduce manual effort and improve operational efficiency.
• Mentor teammates and contribute to raising quality standards across the team.
• Build strong partnerships with analysts, engineers, intelligence specialists, forensic investigators, business stakeholders, and security leaders.

Conocimientos

Incident response

Threat hunting

Security operations

Automation opportunities

Herramientas

SIEM

Forensic tools

Python

Descripción del empleo

About the role

Just imagine helping shape how the LEGO Group detects, responds to, and recovers from most significant cybersecurity incidents. As our Senior Cybersecurity Incident Responder, you'll join the Threat Detection & Response team within the LEGO Group Digital Security. You'll play a key role in strengthening our cyber defence capabilities by leading response to major incidents, improving detection and response processes, supporting security engineering initiatives, and helping build resilient operations. This is an opportunity to contribute to the continued development of a cyber defence function with strong support and investment behind it.

Required Qualifications

• Led major security incidents from detection through resolution and post-incident review.
• Conducted cybersecurity log analysis to investigate and resolve security incidents.
• Designed enterprise-grade security operations workflows that improved security operations effectiveness.
• Performed threat hunting and detection engineering activities to strengthen detection capabilities.
• Led incident response in a global enterprise environment.
• Identified and implemented automation opportunities within security operations processes.

Preferred Qualifications

• Improved detection capabilities to identify and respond to cybersecurity threats.
• Proactively identified gaps in detection and response processes before they lead incidents.
• Collaborated with cybersecurity engineering teams to align incident response practices with security architecture.
• Maintained incident response playbooks, runbooks, and operational processes.
• Any well-known industry certifications, such as GCFA or an equivalent, are considered a plus.

What you'll build

• Lead major security incidents from initial detection through recovery and post-incident review.
• Improve playbooks, workflows, and operational processes that strengthen response effectiveness.
• Research and evaluate new detection techniques to keep capabilities ahead of evolving threats.
• Create automation opportunities that reduce manual effort and improve operational efficiency.
• Mentor teammates and contribute to raising quality standards across the team.
• Build strong partnerships with analysts, engineers, intelligence specialists, forensic investigators, business stakeholders, and security leaders.

Life on the team

You’ll join a close-knit team responsible for end-to-end detection and response of cybersecurity incidents. We support one another, share knowledge openly, and work together to build resilience across the organisation. You’ll have the opportunity to learn from experienced colleagues while contributing your own expertise. We’re looking for someone who brings critical thinking, thoughtful leadership, problem-solving capability, strategic perspective, and the flexibility to adapt as our capabilities continue to evolve.

What success looks like

In your first year, you’ll become a trusted contributor to alert and incident management while developing a deep understanding of the environment and ways of working across the LEGO Group. You’ll take ownership of incident handling, identify meaningful improvements to workflows, and help strengthen detection and response effectiveness. Looking ahead, you’ll contribute to ongoing investments in tools, processes, and capabilities as we continue building an increasingly mature cyber defence function. You’ll work closely with security analysts, threat intelligence specialists, threat hunters, engineers, digital forensic investigators, key business stakeholders, and Digital Security leadership.

What’s in it for you?

• Family Care Leave - We offer enhanced paid leave options for those important times.
• Insurances – All colleagues are covered by our life and disability insurance which provides protection and peace of mind.
• Wellbeing - We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.
• Colleague Discount – We know you’ll love to build, so from day 1 you will qualify for our generous colleague discount.
• Bonus - We do our best work to succeed together. When goals are reached and if eligible, you’ll be rewarded through our bonus scheme.

Your workplace

Your workplace will be the office, store or factory specified in this advert.

Hybrid Working

Our hybrid work model, Best of Both offers you the option of flexibility to work from home up to two days per week. Your People Leader will discuss the principles of the model, including how this option applies to your role and team.

Children are our role models

Children are our role models. Their curiosity, creativity and imagination inspire everything we do.

We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.

Equal Employment Opportunity and Diversity

The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.

Children’s Rights and Child Wellbeing

The LEGO Group is fully committed to Children’s Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer. Thank you for sharing our global commitment to Children’s Rights.

Career Inspiration

Just imagine building your dream career. Then make it real.

Security Communication

We are aware of reports of fraudulent emails and social media messages from individuals falsely claiming to represent the LEGO Group recruitment teams. Please check that recruitment communications are from an official LEGO email address before responding.

Mission Statement

Build your career brick by brick and play your part in continuing our mission to “inspire and develop the builders of tomorrow”.