Senior Cybersecurity Incident Responder

the LEGO Group; København; Hybrid; Confidential; Full time

Benefits offered by this job

Family Care Leave

Life and disability insurance

Wellbeing resources

Colleague discount

Bonus scheme

Job summary

The Lego Group is seeking a Senior Cybersecurity Incident Responder to join our Threat Detection & Response team within Digital Security. You will lead major incidents, refine detection, and help build resilient operations across a global enterprise.

In this role, you will enhance playbooks and workflows, mentor peers, and collaborate with engineers, threat hunters, and business stakeholders to strengthen incident response capabilities. Hybrid work options are available.

Qualifications

• Led major security incidents from detection through resolution and post-incident review.
• Conducted cybersecurity log analysis to investigate and resolve security incidents.
• Designed enterprise-grade security operations workflows that improved security operations effectiveness.
• Performed threat hunting and detection engineering activities to strengthen detection capabilities.
• Led incident response in a global enterprise environment.
• Identified and implemented automation opportunities within security operations processes.

Responsibilities

• Lead major incidents from initial detection through recovery and post-incident review.
• Improve playbooks, workflows, and operational processes that strengthen response effectiveness.
• Research and evaluate new detection techniques to keep capabilities ahead of evolving threats.
• Create automation opportunities that reduce manual effort and improve operational efficiency.
• Mentor teammates and contribute to raising quality standards across the team.
• Build strong partnerships with analysts, engineers, intelligence specialists, forensic investigators, business stakeholders, and security leaders.

Skills

Incident response

Log analysis

SOC workflows

Threat hunting

Automation opportunities

Global enterprise

Job description

Job Description

Just imagine helping shape how the LEGO Group detects, responds to, and recovers from most significant cybersecurity incidents.

About The Role

As our Senior Cybersecurity Incident Responder, you'll join the Threat Detection & Response team within the LEGO Group Digital Security. You'll play a key role in strengthening our cyber defence capabilities by leading response to major incidents, improving detection and response processes, supporting security engineering initiatives, and helping build resilient operations. This is an opportunity to contribute to the continued development of a cyber defence function with strong support and investment behind it.

Required Qualifications

• Led major security incidents from detection through resolution and post-incident review.
• Conducted cybersecurity log analysis to investigate and resolve security incidents.
• Designed enterprise-grade security operations workflows that improved security operations effectiveness.
• Performed threat hunting and detection engineering activities to strengthen detection capabilities.
• Led incident response in a global enterprise environment.
• Identified and implemented automation opportunities within security operations processes.

Preferred Qualifications

• Improved detection capabilities to identify and respond to cybersecurity threats.
• Proactively identified gaps in detection and response processes before they lead incidents.
• Collaborated with cybersecurity engineering teams to align incident response practices with security architecture.
• Maintained incident response playbooks, runbooks, and operational processes.
• Any well-known industry certifications, such as GCFA or an equivalent, are considered a plus.

What You'll Build

• Lead major security incidents from initial detection through recovery and post-incident review.
• Improve playbooks, workflows, and operational processes that strengthen response effectiveness.
• Research and evaluate new detection techniques to keep capabilities ahead of evolving threats.
• Create automation opportunities that reduce manual effort and improve operational efficiency.
• Mentor teammates and contribute to raising quality standards across the team.
• Build strong partnerships with analysts, engineers, intelligence specialists, forensic investigators, business stakeholders, and security leaders.

Life on the team

You’ll join a close-knit team responsible for end-to-end detection and response of cybersecurity incidents. We support one another, share knowledge openly, and work together to build resilience across the organisation. You’ll have the opportunity to learn from experienced colleagues while contributing your own expertise. We’re looking for someone who brings critical thinking, thoughtful leadership, problem-solving capability, strategic perspective, and the flexibility to adapt as our capabilities continue to evolve.

What Success Looks Like

In your first year, you’ll become a trusted contributor to alert and incident management while developing a deep understanding of the environment and ways of working across the LEGO Group. You’ll take ownership of incident handling, identify meaningful improvements to workflows, and help strengthen detection and response effectiveness. Looking ahead, you’ll contribute to ongoing investments in tools, processes, and capabilities as we continue building an increasingly mature cyber defence function. You’ll work closely with security analysts, threat intelligence specialists, threat hunters, engineers, digital forensic investigators, key business stakeholders, and Digital Security leadership.

What’s in it for you?

Here is what you can expect

Family Care Leave

We offer enhanced paid leave options for those important times.

Insurances

All colleagues are covered by our life and disability insurance which provides protection and peace of mind.

Wellbeing

We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.

Colleague Discount

We know you’ll love to build, so from day 1 you will qualify for our generous colleague discount.

Bonus

We do our best work to succeed together. When goals are reached and if eligible, you’ll be rewarded through our bonus scheme.

Your workplace

Your workplace will be the office, store or factory specified in this advert.

Hybrid Working

Our hybrid work model, Best of Both offers you the option of flexibility to work from home up to two days per week. Your People Leader will discuss the principles of the model, including how this option applies to your role and team.

Learn more about our benefits, culture and workplace experience here

Children are our role models. Their curiosity, creativity and imagination inspire everything we do. We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.

The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.

The LEGO Group is fully committed to Children's Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer.

Thank you for sharing our global commitment to Children's Rights.

Just imagine building your dream career.

Then make it real.