Lead Detection & Response Engineer

Help defend one of the UK's largest organisations against evolving cyber threats. As a Lead Detection & Response Engineer within the Cyber Defence Centre, you'll play a key role in protecting the organisation by leading a team of engineers responsible for identifying, investigating and responding to security events and incidents.

This role combines deep technical expertise with people leadership and strategic delivery. You'll establish technical standards, shape the evolution of detection and response capabilities, and lead initiatives that strengthen cyber resilience across the organisation.

What you'll do:

• Lead and coordinate cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities.
• Provide technical guidance and support to engineers during incidents, investigations and threat-led activities.
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes.
• Support threat hunting, investigations and proactive cyber defence activities to identify and reduce cyber risk.
• Act as a technical authority for security engineering, influencing policies, standards, roadmaps and investment decisions.
• Lead, coach and develop Detection & Response Engineers, building capability and supporting an inclusive, high-performing team culture.

• Strong capability in Security Engineering, with proven experience in a Security Operations, Cyber Defence, Detection & Response or Incident Response environment.
• Experience leading, coaching and developing technical colleagues within a high-performing team environment.
• Strong understanding of incident response methodologies, attacker behaviours and cyber attack lifecycles.
• Experience of threat hunting, investigation and cyber defence activities to identify and respond to security threats.
• Strong analytical and problem-solving skills, with the ability to assess risk and make effective decisions during investigations and incidents.
• Excellent stakeholder management skills, with the ability to influence and collaborate effectively across technical and non-technical audiences.

• Experience in Digital Forensics activities and investigations.
• Experience contributing to or shaping cyber security policies, standards or secure design patterns.
• Experience automating operational processes to improve detection and response effectiveness and efficiency.

• 30 days' holiday, with bank holidays on top.
• A generous pension contribution.
• Discretionary annual performance-related bonus.
• Private medical benefit.
• Access to wellbeing initiatives and colleague support programmes.
• Opportunities for ongoing learning, career development and internal mobility.

This role will include a requirement to be part of an on-call rota.