Lead Cyber Defense & Detection Engineer

Lloyds Bank plc; City of Edinburgh; Hybrid; GBP 73,000 - 81,000; Full time

Benefits offered by this job

30 days holiday

Pension contribution

Discretionary annual performance‑relat

Flexible benefits

Colleague and family support

Job summary

Lloyds Banking Group is seeking a Lead Detection and Response Engineer to defend one of the UK's largest organisations against evolving cyber threats. The hybrid role is based from Edinburgh with multiple site locations and a flexible working approach.

You will lead investigations, analyse security events, and drive proactive defence activities while mentoring engineers to raise technical standards and foster continuous learning across the team.

Qualifications

• Experience in SOC/Cyber Defence environments.
• Experience investigating security incidents with enterprise security tools.
• Understanding of threat detection lifecycles and attacker tactics.
• Ability to lead and mentor colleagues while fostering a high-performing culture.
• Strong analytical and problem-solving skills for complex situations.
• Ability to influence technical outcomes and communicate with diverse audiences.

Responsibilities

• Lead investigations into security alerts, incidents and threats with containment and recovery.
• Analyse security events and attacker behaviours to determine response actions.
• Conduct threat hunting and forensic activities to identify unknown threats.
• Contribute to improving detection and response capabilities via initiatives.
• Utilise automation, AI, and modern security tooling to boost efficiency.
• Support and coach Security Engineers while promoting excellence and knowledge sharing.

Skills

Security Operations

Incident Response

Threat Hunting

Leadership

Cyber Analytics

Job description

Lloyds Banking Group is seeking a Lead Detection and Response Engineer to defend one of the UK's largest organisations against evolving cyber threats. The hybrid role is based from Edinburgh with multiple site locations and a flexible working approach.

You will lead investigations, analyse security events, and drive proactive defence activities while mentoring engineers to raise technical standards and foster continuous learning across the team.