Detection & Response Engineer

Lloyds Banking Group; West of England; Hybrid; GBP 73,000 - 81,000; Full time

Benefits offered by this job

30 days holiday

Generous pension

Private health cover

Flexible benefits

Learning & development

Job summary

Lloyds Banking Group is hiring a Detection & Response Engineer to help defend one of the UK’s largest organisations from evolving cyber threats. The role is hybrid, with at least two days per week at office sites, and spans Edinburgh, Bristol, Leeds and Manchester.

You’ll lead investigations, analyse threats, and drive continuous improvements in detection and response, while coaching peers and contributing to cyber resilience across the group.

Qualifications

• Experience investigating cyber security incidents in a SOC, cyber defence, threat hunting or IR environment.
• Ability to analyse attacker behaviour, security events and threat intelligence.
• Strong problem-solving and communication skills for technical and non-technical audiences.

Responsibilities

• Lead complex investigations into security alerts and incidents.
• Analyse events and threat intelligence to determine action.
• Undertake threat hunting, forensic investigations and proactive defence activities.
• Improve detection and response capabilities and operational effectiveness.
• Use automation and modern security tooling to improve efficiency.
• Coach and support colleagues to develop team capability.
• Participate in on-call rota for a small number of weeks each year.

Skills

Cyber security investigations

Threat analysis

Analytical thinking

Technical communication

Mentoring

Tools

Security tooling

Job description

End Date

Monday 28 September 2026

Salary Range

£72,702 - £80,780

We support flexible working – click here for more information on flexible working options

Flexible Working Options

Flexibility in when hours are worked, Hybrid Working, Job Share

Job Description Summary

.

Job Description

Detection & Response Engineer

SALARY

£72,702 - £80,780

LOCATION(S):

Edinburgh, Bristol, Leeds, Manchester

HOURS:

Full time

WORKING PATTERN:

Our work style is hybrid, which involves spending at least two days per week, or 40% of your time, at one of our office sites.

About this opportunity

Help defend one of the UK’s largest organisations against evolving cyber threats!

As a Detection & Response Engineer within our Cyber Defence Centre, you’ll play a key role in protecting the organisation from cyber threats by leading complex investigations, identifying malicious activity and continuously enhancing our detection and response capabilities.

Working alongside experienced cyber defence professionals, you’ll act as a technical specialist, contributing to the identification, investigation, containment and remediation of security incidents while helping strengthen our cyber resilience. This is an individual contributor role, offering opportunities to provide technical leadership, coach colleagues and influence how we detect and respond to threats!

What you’ll do:

• Lead complex investigations into security alerts, incidents and emerging threats, driving effective containment, eradication and recovery activities.
• Analyse security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions.
• Undertake threat hunting, forensic investigations and proactive cyber defence activities to identify previously unknown threats.
• Improve cyber defence capabilities through continuous detection and response activities, helping enhance operational effectiveness.
• Use automation, AI and modern security tooling to improve the efficiency and effectiveness of detection and response engineering.
• Coach and support colleagues, sharing technical expertise and lessons learned to help develop team capability and engineering excellence.
• Participate in an on‑call rota for a small number of weeks each year.

About us / Why Lloyds Banking Group

Our continued dedication to helping Britain prosper means that as a colleague you can make a difference to customers, businesses and communities.

Together we have a key role to play in shaping the bank of the future, whilst the scale and reach of our Group means you’ll continue to have opportunities to learn, grow and develop.

We’re focused on creating a values‑led culture, and our approach to inclusion and diversity means that we all have the chance to make a real difference, together.

What you’ll need

• Strong experience investigating cyber security incidents within a Security Operations Centre, Cyber Defence, Threat Hunting, Incident Response or similar environment.
• Expertise in analysing attacker behaviour, security events and threat intelligence to support effective detection and response outcomes.
• Strong problem‑solving and critical thinking skills, with the ability to assess complex situations and determine appropriate actions.
• Experience influencing technical outcomes through collaboration, exchanging information, and technical expertise.
• Experience coaching, mentoring or supporting the development of technical colleagues.
• Strong written and verbal communication skills, with the ability to explain technical findings to both technical and non‑technical audiences.

And any experience of this would be really useful

• Experience in one or more specialist cyber defence disciplines such as Threat Hunting, Detection Engineering, Threat Analysis or Digital Forensics.
• Experience using automation and AI capabilities to improve cyber defence processes.
• Knowledge of enterprise‑scale security tooling and technologies.

This is a place for you…

Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop.

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative.

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long‑term health or neuro‑divergent condition, through the Disability Confident Scheme.

We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.

Benefits

• 30 days’ holiday, with bank holidays on top.
• A generous pension contribution from the Group.
• Private health cover and wellbeing support.
• Access to a wide range of colleague benefits and flexible benefits options.
• Ongoing learning, development and career growth opportunities.

We keep your data safe. So, we’ll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We’ll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.

We’re focused on creating a values‑led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.