Senior Detection & Response Engineer - Remote

Jagex: The RuneScape Company; Cambridge; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Private Healthcare

Performance Bonus

Pension contributions

Life Insurance

Enhanced family leave

Flexible working hours

25 days annual leave

Job summary

Jagex: The RuneScape Company is seeking a Senior Detection & Response Engineer to strengthen detection and incident response across studio and gaming environments. You will own escalated investigations, determine impact and drive effective responses.

You'll develop tooling, detection logic, automation and runbooks to improve security telemetry and response time, working in a hybrid setup with our external SOC and internal teams. On-call rotation is required.

Qualifications

• Experience investigating security incidents and collecting artefacts.
• Strong knowledge of SIEMs, alert tuning and investigation workflows.
• Familiarity with cloud security controls in hybrid environments.

Responsibilities

• Lead investigations into escalated security events and incidents.
• Develop detection rules and monitoring logic across environments.
• Build tooling to improve telemetry and response times.
• Conduct threat hunting using MITRE ATT&CK principles.
• Create and improve incident runbooks and playbooks.
• Collaborate with external SOC and internal engineering teams.
• Participate in on-call rotation.

Skills

Investigation leadership

SIEM expertise

Threat hunting

Cloud security

Scripting (PowerShell/Python)

MITRE ATT&CK

Incident response on-call

Education

Bachelor's degree in Cybersecurity/CS

Tools

Splunk

Elastic SIEM

Job description

Jagex: The RuneScape Company is seeking a Senior Detection & Response Engineer to strengthen detection and incident response across studio and gaming environments. You will own escalated investigations, determine impact and drive effective responses.

You'll develop tooling, detection logic, automation and runbooks to improve security telemetry and response time, working in a hybrid setup with our external SOC and internal teams. On-call rotation is required.