Senior Detection & Response Engineer (Remote)

Camwebdir; United Kingdom; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Private Healthcare

Discretionary annual performance bonus

Pension contributions

Life Insurance

Enhanced family leave

Flexible working hours

25 days annual leave + bank holidays

Job summary

Jagex, the RuneScape Company, seeks a security investigations lead to own escalated incidents, develop detections, and automate response workflows. Based in the Cambridge area with flexible/remote options, you’ll join a team delivering robust security across cloud, network, and endpoints.

You will build detections, playbooks and tooling, while collaborating with SOC and engineering teams. A strong background in incident response, SIEM, and MITRE ATT&CK is essential for success.

Qualifications

• Hands-on experience investigating security incidents, including collecting artefacts and analysing data across endpoints, networks and apps.
• Strong working knowledge of SIEM and security monitoring tooling with ability to write complex queries.
• Understanding of adversary TTPs and MITRE ATT&CK principles.
• Practical knowledge of cloud environments and security controls across hybrid infrastructure.
• Scripting knowledge such as PowerShell or Python is advantageous.
• Experience with forensic investigations across Windows, macOS or Linux environments.

Responsibilities

• Lead investigations into escalated security events and incidents, developing hypotheses, collecting evidence and determining root cause and impact.
• Build and optimise detection rules, queries and monitoring logic across cloud, endpoint, network and application environments.
• Develop tooling and automation to improve security telemetry, alert enrichment, investigation workflows and response times.
• Conduct threat hunting using adversary behaviours, TTPs and MITRE ATT&CK, incorporating findings into security controls and detections.
• Create and continuously improve incident runbooks, playbooks and detection processes based on findings from real-world investigations.
• Work with external SOC and internal engineering teams to strengthen monitoring coverage, investigate escalations and improve detection and response capability.
• This position will require participation in an on-call rotation.

Skills

Incident investigations

SIEM experience

Threat hunting

MITRE ATT&CK

Cloud security

PowerShell

Python

On-call rotation

Tools

PowerShell

Python

Job description

Jagex, the RuneScape Company, seeks a security investigations lead to own escalated incidents, develop detections, and automate response workflows. Based in the Cambridge area with flexible/remote options, you’ll join a team delivering robust security across cloud, network, and endpoints.

You will build detections, playbooks and tooling, while collaborating with SOC and engineering teams. A strong background in incident response, SIEM, and MITRE ATT&CK is essential for success.