Senior Detection & Response Engineer

Lloyds Bank plc; City of Edinburgh; Hybrid; GBP 93,000 - 109,000; Full time

Benefits offered by this job

30 days' holiday

Pension contribution

Discretionary annual bonus

Private healthcare

Flexible/hybrid working

Wellbeing programmes

Job summary

Lloyds Banking Group in Edinburgh is seeking a Senior Detection & Response Engineer to defend against evolving cyber threats within its Cyber Defence Centre.

You will lead complex investigations, mentor engineers, and develop detection capabilities, with a focus on threat hunting, automation, and strong collaboration with technical and business teams. This role offers hybrid working and a clear path to influence security strategy.

Qualifications

• Security Engineering: Demonstrated experience leading and handling complex cyber security incidents.
• Investigations: Proven ability to conduct complex investigations, determine root cause, assess the extent of compromise and lead remediation and recovery efforts.
• Problem Solving: Strong analytical and problem-solving skills with the ability to make sound decisions in fast-moving and ambiguous situations.
• Technology Intelligence: Deep understanding of attacker behaviours, cyber attack lifecycles, emerging threats and modern cyber defence approaches.
• Collaboration: Experience providing technical leadership, mentoring and guidance while working effectively across technical and business teams.
• Stakeholder Management: Ability to communicate clearly with technical specialists, senior leaders and non-technical audiences during cyber incidents and response activities.
• Experience developing and enhancing threat hunting and proactive cyber defence capabilities.
• Experience implementing automation and optimisation within detection and response environments.
• Understanding of cyber security governance, risk management, regulatory obligations and operational resilience requirements relevant to incident response.

Responsibilities

• Lead and coordinate complex cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities.
• Provide technical leadership, mentoring and guidance to engineers during incidents, investigations and threat-led activities.
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes.
• Lead threat hunting, proactive investigations and cyber defence activities to identify and reduce cyber risk.
• Act as a technical authority for security engineering, influencing policies, patterns, roadmaps and investment decisions.
• Drive automation and optimisation opportunities to improve the effectiveness and efficiency of detection and response activities.

Skills

Security engineering

Incident investigations

Problem solving

Threat intelligence

Collaboration

Stakeholder management

Threat hunting

Automation

Governance & compliance

Cyber defence

Job description

End Date Saturday 17 October 2026 Salary Range £92,701 - £109,060 We support flexible working – click here for more information on flexible working options Flexible Working Options Hybrid Working, Job Share Job Description Summary.

Job Description Senior Detection & Response Engineer

Senior Detection & Response Engineer SALARY: £92,701 - £109,060 LOCATION(S): Edinburgh, Leeds, Bristol, Manchester HOURS: Full time WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of your time, at one of our office sites. About this opportunity Help defend one of the UK's largest organisations against evolving cyber threats. As a Senior Detection & Response Engineer within our Cyber Defence Centre, you'll play a key role in protecting the organisation from cyber threats as a senior individual contributor. You'll combine deep technical expertise across detection and response engineering, complex investigation management and cyber defence capability development. Working closely with engineers and senior technical colleagues, you'll help shape solutions, influence technical decisions and strengthen our resilience against a constantly changing threat landscape.

Key responsibilities include:

• Lead and coordinate complex cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities.
• Provide technical leadership, mentoring and guidance to engineers during incidents, investigations and threat-led activities.
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes.
• Lead threat hunting, proactive investigations and cyber defence activities to identify and reduce cyber risk.
• Act as a technical authority for security engineering, influencing policies, patterns, roadmaps and investment decisions.
• Drive automation and optimisation opportunities to improve the effectiveness and efficiency of detection and response activities.

About us / Why Lloyds Banking Group

Like the modern Britain we serve, we're evolving. Investing in people, technology and data is at the heart of our strategy, helping us create better outcomes for our customers, businesses and communities. Join us and you'll be part of a collaborative environment where your expertise can make a meaningful impact on the security and resilience of one of the UK's largest financial services organisations.

What you'll need

• Security Engineering: Demonstrated experience leading and handling complex cyber security incidents within a Security Operations, Cyber Defence or Incident Response environment.
• Investigations: Proven ability to conduct complex investigations, determine root cause, assess the extent of compromise and lead remediation and recovery efforts.
• Problem Solving: Strong analytical and problem-solving skills with the ability to make sound decisions in fast-moving and ambiguous situations.
• Technology Intelligence: Deep understanding of attacker behaviours, cyber attack lifecycles, emerging threats and modern cyber defence approaches.
• Collaboration: Experience providing technical leadership, mentoring and guidance while working effectively across technical and business teams.
• Stakeholder Management: Ability to communicate clearly with technical specialists, senior leaders and non-technical audiences during cyber incidents and response activities.
• Experience developing and enhancing threat hunting and proactive cyber defence capabilities.
• Experience implementing automation and optimisation within detection and response environments.
• Understanding of cyber security governance, risk management, regulatory obligations and operational resilience requirements relevant to incident response.

Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop. We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative. We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long-term health or neurodivergent condition, through the Disability Confident Scheme. We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.

Benefits

• 30 days' holiday, with bank holidays on top.
• A generous pension contribution package.
• Discretionary annual performance-related award.
• Private healthcare options.
• Flexible and hybrid working arrangements.
• Access to wellbeing and colleague support programmes.

Ready to make an impact?

At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop. We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person. We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference. With 320 years under our belt, we're used to change, and today is no different. Join us and help drive this change, shaping the future of finance whilst working at pace to deliver for our customers. Here, you'll do the best work of your career. Your impact will be amplified by our scale as you learn and develop, gaining skills for the future.

Should you wish to contact us for any reason, please email us at: [e-mail]

For more Flexible Working Options please use the free text search, e.g. job sharing, variable hours, to identify relevant matches.