Detection & Response Engineer

This role is an individual contributor and is ideal for an experienced cyber security professional with a passion for threat detection, incident response and continuous improvement. As a senior member of the team, you'll provide technical leadership through expertise, coaching and mentorship rather than formal line management responsibilities.  

You'll partner closely with engineers across the Cyber Defence Centre, helping to raise technical standards, share knowledge, and support the development of less experienced colleagues. You'll have opportunities to influence how we detect and respond to threats while remaining hands-on in the investigation of complex security incidents and cyber defence activities. 

What you'll do 

• Lead complex investigations into security alerts, incidents and emerging threats, driving effective containment, eradication and recovery activities. 

• Perform detailed analysis of security events, attacker behaviours and threat intelligence to identify risks and determine appropriate response actions. 

• Undertake threat hunting, forensic investigations and proactive cyber defence activities to identify previously unknown threats. 

• Contribute to the development and improvement of Cyber Defence by utilising the Continuous Detection Continuous Response (CD/CR) model. 

• Use automation, AI and modern security tooling to improve the effectiveness and efficiency of detection and response engineering. 

• Mentor and coach Detection & Response Engineers, providing guidance and technical support to help develop team capability. 

• Act as a technical role model within the team, sharing lessons learned to drive continuous improvement and engineering excellence. 

What you'll need 

• Significant experience working within a Security Operations Centre (SOC), Cyber Defence, Incident Response, Threat Hunting or related cyber security function. 

• Strong understanding of threat detection lifecycle, attacker behaviour and Tactics, Techniques and Procedures (TTPs) 

• Experience leading complex security investigations and responding to security incidents using enterprise security tools and technologies. 

• Knowledge of one or more cyber defence fields such as Incident Response, Threat Hunting, Detection Engineering, Threat Analysis or Digital Forensics. 

• Strong analytical and problem-solving skills, with the ability to assess complex situations and determine appropriate actions. 

• Experience coaching, mentoring or developing technical colleagues 

• Ability to influence technical outcomes and drive improvements through expertise, collaboration and credibility. 

• Excellent written and verbal communication skills, including the ability to explain technical findings clearly to both technical and non-technical audiences. 

• This role will include a requirement to work as part of an on-call rota 

Our continued dedication to helping Britain prosper means that as a colleague you can make a difference to customers, businesses and communities.
 

Together we have a key role to play in shaping the bank of the future, whilst the scale and reach of our Group means you'll continue to have opportunities to learn, grow and develop.
 

We're focused on crafting a values-led culture, and our approach to inclusion and diversity means that we all have the chance to create a real difference, together.