Lead Incident Response Engineer — Security Operations & Automation

Meta; City of Westminster; On-site; GBP 120,000 - 180,000; Full time

Job summary

Meta Security is seeking an experienced Incident Response Engineer to lead investigations and drive incident resolution across a cross-functional environment. You will shape multi-year roadmaps and mature investigative and response services with automation and strong partnerships.

Ideal candidates have 10+ years in Security Incident Response, with expertise in detection, forensics, and leading complex programs. Strong collaboration with IT and software teams is essential.

Qualifications

• 10+ years of experience in Security Incident Response and Detection & Response Engineering in a large, regulated organization.
• Experience leading and managing complex cross-functional programs.
• Experience with incident and program status reporting for leadership.

Responsibilities

• Conduct security investigations and lead incident response in cross-functional environments.
• Develop initiatives to improve detection, response and remediation capabilities.
• Refine metrics and SLAs to measure security operations and incident response services.
• Collaborate with cross-functional teams to deliver multi-year roadmaps and projects.
• Coach and mentor team members for professional growth and long-term development.
• Partner with software and production teams to build scalable incident response solutions.
• Prioritize, automate and scale detection and response activities.

Skills

Incident Response

Security Operations

Threat Hunting

Cross-functional Leadership

Program Management

Automation

Malware Analysis

AI/Agent Orchestration

Team Mentoring

Threat Intelligence

Job description

Meta Security is seeking an experienced Incident Response Engineer to lead investigations and drive incident resolution across a cross-functional environment. You will shape multi-year roadmaps and mature investigative and response services with automation and strong partnerships.

Ideal candidates have 10+ years in Security Incident Response, with expertise in detection, forensics, and leading complex programs. Strong collaboration with IT and software teams is essential.