Senior Detection & Response Engineer

Lloyds Banking Group; Leeds; Hybrid; GBP 93,000 - 109,000; Full time

Benefits offered by this job

30 days holiday

Pension contribution

Private healthcare options

Discretionary bonus

Job summary

Lloyds Banking Group is seeking a Senior Detection & Response Engineer to lead complex cyber security investigations, threat hunting and incident response across multiple UK sites. The role requires strong technical leadership and a track record of improving detection and response capabilities.

Hybrid working with two days per week on site is expected. The position offers a salary range of £92,701 to £109,060 and a clear focus on driving automation, threat-led activities and coordination across

Qualifications

• Experience leading complex cyber security incidents within a Security Operations, Cyber Defence or Incident Response environment.
• Proven ability to conduct complex investigations, determine root cause and lead remediation.
• Strong analytical and problem-solving skills in fast-moving situations.
• Deep understanding of attacker behaviours, cyber attack lifecycles and modern defence approaches.
• Experience providing technical leadership across technical and business teams.
• Ability to communicate clearly with technical and non-technical audiences during incidents.

Responsibilities

• Lead and coordinate complex cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities.
• Provide technical leadership, mentoring and guidance to engineers during incidents, investigations and threat-led activities.
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes.
• Lead threat hunting, proactive investigations and cyber defence activities to identify and reduce cyber risk.
• Act as a technical authority for security engineering, influencing policies, patterns, roadmaps and investment decisions.
• Drive automation and optimisation opportunities to improve the effectiveness and efficiency of detection and response activities.

Skills

Security Engineering

Investigations

Problem Solving

Technology Intelligence

Collaboration

Stakeholder Management

Tools

Security tooling

Job description

End Date Saturday 17 October 2026

Salary Range £92,701 - £109,060

Flexible Working Options Hybrid Working, Job Share

Senior Detection & Response Engineer

LOCATION(S): Edinburgh, Leeds, Bristol, Manchester

HOURS: Full time

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of your time, at one of our office sites.

Key responsibilities

• Lead and coordinate complex cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities.
• Provide technical leadership, mentoring and guidance to engineers during incidents, investigations and threat-led activities.
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes.
• Lead threat hunting, proactive investigations and cyber defence activities to identify and reduce cyber risk.
• Act as a technical authority for security engineering, influencing policies, patterns, roadmaps and investment decisions.
• Drive automation and optimisation opportunities to improve the effectiveness and efficiency of detection and response activities.

About Us / Why Lloyds Banking Group

Like the modern Britain we serve, we’re evolving. Investing in people, technology and data is at the heart of our strategy, helping us create better outcomes for our customers, businesses and communities.

Join us and you’ll be part of a collaborative environment where your expertise can make a meaningful impact on the security and resilience of one of the UK's largest financial services organisations.

What You’ll Need

• Security Engineering: Demonstrated experience leading and handling complex cyber security incidents within a Security Operations, Cyber Defence or Incident Response environment.
• Investigations: Proven ability to conduct complex investigations, determine root cause, assess the extent of compromise and lead remediation and recovery efforts.
• Problem Solving: Strong analytical and problem-solving skills with the ability to make sound decisions in fast-moving and ambiguous situations.
• Technology Intelligence: Deep understanding of attacker behaviours, cyber attack lifecycles, emerging threats and modern cyber defence approaches.
• Collaboration: Experience providing technical leadership, mentoring and guidance while working effectively across technical and business teams.
• Stakeholder Management: Ability to communicate clearly with technical specialists, senior leaders and non-technical audiences during cyber incidents and response activities.

And any experience of this would be really useful

• Experience developing and enhancing threat hunting and proactive cyber defence capabilities.
• Experience implementing automation and optimisation within detection and response environments.
• Understanding of cyber security governance, risk management, regulatory obligations and operational resilience requirements relevant to incident response.

This is a place for you...

Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop.

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative.

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long-term health or neurodivergent condition, through the Disability Confident Scheme.

We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.

Benefits

• 30 days' holiday, with bank holidays on top.
• A generous pension contribution package.
• Discretionary annual performance-related award.
• Private healthcare options.
• Flexible and hybrid working arrangements.
• Access to wellbeing and colleague support programmes.

At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.

We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.

We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.