Senior Detection & Response Engineer

Lloyds; City of Edinburgh; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Holiday allowance

Flexible working

Family leave

Health insurance

Pension

Share plans

Cash flex

Job summary

Lloyds in Edinburgh is seeking a Senior Detection & Response Engineer to defend one of the UK's largest organisations within our Cyber Defence Centre. You will play a key role as a senior individual contributor, applying deep expertise across detection, response, and investigations.

You will lead complex security investigations, mentor engineers, and drive automation and capability development to strengthen resilience against evolving threats.

Qualifications

• Lead and coordinate complex cyber security investigations.
• Provide technical leadership during incidents and threat-led activities.
• Develop and improve detection and response capabilities.

Responsibilities

• Lead and coordinate complex cyber security investigations, driving containment and remediation.
• Provide mentoring and guidance to engineers during incidents.
• Develop and continuously improve detection and response capabilities.
• Lead threat hunting and proactive cyber defence activities.
• Influence policies, patterns and roadmaps as a technical authority.
• Drive automation to improve effectiveness and efficiency.

Skills

Threat hunting

Incident response

Security engineering

Automation

Investigation management

Mentoring

Technical leadership

Cyber threat intelligence

Job description

• Help defend one of the UK’s largest organisations against evolving cyber threats. As a Senior Detection & Response Engineer within our Cyber Defence Centre, you’ll play a key role in protecting the organisation from cyber threats as a senior individual contributor
• You’ll combine deep technical expertise across detection and response engineering, complex investigation management and cyber defence capability development. Working closely with engineers and senior technical colleagues, you’ll help shape solutions, influence technical decisions and strengthen our resilience against a constantly changing threat landscape
• Lead and coordinate complex cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities
• Provide technical leadership, mentoring and guidance to engineers during incidents, investigations and threat-led activities
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes
• Lead threat hunting, proactive investigations and cyber defence activities to identify and reduce cyber risk
• Act as a technical authority for security engineering, influencing policies, patterns, roadmaps and investment decisions
• Drive automation and optimisation opportunities to improve the effectiveness and efficiency of detection and response activities

Benefits

• A generous holiday allowance: You’ll be eligible for a minimum of 22 days holiday (excluding bank holidays), rising to 30 days based on length of service and grade.
• A flexible way of working: Whether you want flexibility over your location or when you log on, together we can create an approach that works for you and for the business.
• Family leave: Up to 63 weeks of maternity or adoption leave. Statutory maternity or adoption pay is available for 39 weeks, and 20 weeks will be enhanced to the equivalent of full pay. Partners can have six weeks of fully paid paternity leave.
• Flex cash: This is 4% of your basic salary and can be used to spend on the benefits of your choice, or you can choose to take it as a cash top up in your monthly salary.
• Health insurance: Our company funded Private Medical Benefit provides all colleagues with access to good quality medical care, including accommodation, nursing care and specialist advice.
• Colleague Offers: Get discounts on everything from electrical items to cinema tickets and weekly food shopping. You can share this benefit with up to ten family members or friends.
• Financial products: Take advantage of our great financial products, some at a discounted rate, including current accounts, home and car insurance and loans.
• Share plans: Participate in Sharematch and receive matching shares of up to £45 a month from the company, and you can choose to participate in Sharesave, our combined savings and share option plan.
• Pension: We offer a generous pension plan, with all joiners being automatically enrolled in our ‘Your Tomorrow’ scheme. You can decide how much you save and get a say in where your contributions are invested.

• Stakeholder Management: Ability to communicate clearly with technical specialists, senior leaders and non-technical audiences during cyber incidents and response activities
• Security Engineering: Demonstrated experience leading and handling complex cyber security incidents within a Security Operations, Cyber Defence or Incident Response environment
• Investigations: Proven ability to conduct complex investigations, determine root cause, assess the extent of compromise and lead remediation and recovery efforts
• Problem Solving: Strong analytical and problem-solving skills with the ability to make sound decisions in fast-moving and ambiguous situations
• Collaboration: Experience providing technical leadership, mentoring and guidance while working effectively across technical and business teams
• Technology Intelligence: Deep understanding of attacker behaviours, cyber attack lifecycles, emerging threats and modern cyber defence approaches
• Experience implementing automation and optimisation within detection and response environments
• Experience developing and enhancing threat hunting and proactive cyber defence capabilities
• Understanding of cyber security governance, risk management, regulatory obligations and operational resilience requirements relevant to incident response