Senior Detection & Response Engineer — Remote-First

Jagex: The RuneScape Company; Cambridge; Hybrid; GBP 85,000 - 130,000; Full time

Benefits offered by this job

Private Healthcare

Dental Plan

Discretionary annual performance bonus

Minimum 6% Pension contributions

Life Insurance

Enhanced family leave policies

Flexible working hours

25 days annual leave + Bank holidays

Job summary

Jagex: The RuneScape Company is seeking a Senior Detection & Response Engineer to strengthen our cyber security capabilities. You will own escalated investigations, develop detection logic, and drive automation across hybrid cloud and on‑prem environments.

You will work with our external SOC and internal engineering teams, participate in on‑call rotations, and help shape monitoring coverage to focus on meaningful signals and risks.

Qualifications

• Hands-on experience investigating security incidents with artifact collection.
• Strong knowledge of SIEM and monitoring tooling for complex investigations.
• Understanding of TTPs and MITRE ATT&CK principles.
• Practical knowledge of cloud environments and hybrid infrastructure security.
• Background in detection logic, runbooks, automation or tooling; scripting helps.
• Knowledge of OS internals across Windows, macOS or Linux.

Responsibilities

• Lead escalated security investigations with hypotheses, evidence, root-cause and impact.
• Build and optimise detection rules, queries and monitoring logic across environments.
• Develop tooling and automation to improve telemetry, enrichment and response times.
• Conduct threat hunting using adversary behaviours and MITRE ATT&CK techniques.
• Create and improve incident runbooks, playbooks and detection processes.
• Collaborate with external SOC and internal teams to strengthen monitoring.

Skills

SIEM proficiency

Incident investigation

MITRE ATT&CK

Cloud security

Threat hunting

Hybrid infrastructure

PowerShell

Python

Tools

PowerShell

Python

Job description

Jagex: The RuneScape Company is seeking a Senior Detection & Response Engineer to strengthen our cyber security capabilities. You will own escalated investigations, develop detection logic, and drive automation across hybrid cloud and on‑prem environments.

You will work with our external SOC and internal engineering teams, participate in on‑call rotations, and help shape monitoring coverage to focus on meaningful signals and risks.