Security Detection & Response Specialist

Reference: bt5sapitlm79qvd3ylqi

We are seeking a Security Detection & Response Specialist to help protect critical systems, data and services from evolving cyber threats. Working within a collaborative security function, you will monitor, investigate and respond to security events across cloud, network, endpoint and application environments. You will play a key role in improving detection capability, reducing risk and supporting the organisation’s wider security objectives.

Your responsibilities will include monitoring alerts from security information and event management (SIEM), endpoint detection and response (EDR), identity and cloud security platforms, as well as triaging and investigating suspected incidents. You will lead or support incident response activities, assess impact, contain threats, coordinate remediation and ensure that incidents are documented through to resolution. You will also contribute to forensic analysis, threat hunting and the development of actionable intelligence from internal and external sources.

You will create, tune and maintain detection rules, playbooks and response procedures, helping to reduce false positives and improve investigation times. The role will involve analysing logs and telemetry, identifying attack patterns, producing clear incident reports and contributing to post-incident reviews. You will work closely with infrastructure, engineering, identity, risk and compliance teams to strengthen preventative and detective controls, while providing practical security guidance to technical and non-technical stakeholders.

Applicants should have experience in a security operations, incident response, threat detection or similar role, with a sound understanding of common attack techniques, vulnerabilities and defensive controls. Practical experience with SIEM, EDR, vulnerability management, identity monitoring and cloud security technologies is essential. Familiarity with frameworks such as MITRE ATT&CK, NIST or Cyber Kill Chain, together with the ability to script in PowerShell, Python or a similar language, would be advantageous.

You will be analytical, methodical and calm under pressure, with strong written and verbal communication skills. Relevant professional certifications or demonstrable equivalent experience are welcomed. This is an opportunity to make a direct contribution to cyber resilience while developing your expertise in a supportive, continually evolving environment.

COMPETITIVE SALARY
Added 21/10/2026
Reference: bt5sapitlm79qvd3ylqi

Security Detection & Response Specialist

Chester, England, United Kingdom Permanent Incident Response

Other similar jobs

Security Detection & Response I

Added 07/09/2026

We are seeking a Security Detection & Response I professional to support the monitoring, investigation, and resolution of cybersecurity events across a varied technology environment. In this role, you will help protect systems, applications, networks, and data by reviewing security alerts, identifying potential threats, and coordinating timely responses. You will work with experienced security specialists and technology teams to assess risk, contain incidents, and contribute to continuous improvements in security operations. Your responsibilities will include monitoring alerts from security information and event management, endpoint detection, identity, network, and cloud security tools; performing initial triage and investigation of suspected incidents; documenting...

Learn more

Cyber Incident Management Senior Specialist

Added 19/10/2026

We are seeking a Cyber Incident Management Senior Specialist to lead the effective coordination, investigation and resolution of cyber security incidents across a complex technology environment. This role will act as a senior point of contact during high-severity incidents, ensuring that response activities are organised, timely and aligned with established security and business continuity procedures. You will work closely with security operations, infrastructure, technology, risk, legal, communications and third-party teams to minimise impact and support a rapid return to normal operations. Key responsibilities will include managing the end-to-end incident lifecycle, from initial triage and severity assessment through containment, eradication, recovery...

Learn more

Security Expert-Detection & Response

Added 23/10/2026

We are seeking an experienced Security Expert – Detection & Response to strengthen cyber defence capabilities and help protect critical systems, data and services. This role will lead the identification, investigation and resolution of security incidents, while improving the organisation’s ability to detect and respond to emerging threats. You will monitor and investigate alerts from security information and event management, endpoint detection and response, network monitoring and cloud security platforms. Working across technical and business teams, you will assess potential threats, perform triage, contain incidents and coordinate remediation. You will also contribute to forensic investigations, root-cause analysis and post-incident reviews,...

Learn more

Security Engineer (Detection & Response)

Added 07/10/2026

We are seeking a Security Engineer (Detection & Response) to strengthen our ability to identify, investigate, and contain cyber threats across a complex technology environment. In this role, you will design, implement, and continuously improve security monitoring and detection capabilities across cloud, endpoint, network, identity, and application platforms. You will work closely with security operations, infrastructure, engineering, and risk teams to reduce exposure, improve visibility, and support a resilient security posture. Your responsibilities will include developing and tuning detection rules, analytics, and alerting logic within SIEM, EDR, SOAR, and related security platforms. You will investigate suspicious activity, conduct threat hunting,...

Learn more

Senior Security Engineer - Detection & Response

Added 23/09/2026

We are seeking a Senior Security Engineer – Detection & Response to strengthen and evolve our security operations capability. In this role, you will design, implement and maintain detection and response systems that identify, investigate and contain threats across cloud, endpoint, identity, network and application environments. You will work closely with security operations, infrastructure, engineering and risk teams to improve visibility, reduce response times and support the continuous improvement of the organisation’s security posture. Your responsibilities will include developing and tuning detection rules, analytic queries, dashboards and automated response workflows; investigating complex security alerts and incidents; leading technical response activities...

Learn more

Detection & Response Security Engineer, Threat Intelligence

Added 22/09/2026

We are seeking a Detection & Response Security Engineer, Threat Intelligence, to strengthen cyber defence capabilities across a complex and evolving technology environment. In this role, you will monitor the threat landscape, identify emerging risks, and translate intelligence into practical detection and response improvements. You will work closely with security operations, incident response, engineering, and risk teams to investigate suspicious activity, improve visibility, and help protect critical systems, data, and users. Key responsibilities will include collecting, analysing, and validating threat intelligence from open, commercial, and internal sources; developing and maintaining indicators of compromise, detection rules, and threat-hunting hypotheses; and mapping...

Learn more

Senior Security Engineer, Detection and Response

Added 09/09/2026

We are seeking a Senior Security Engineer, Detection and Response to strengthen a mature security operations capability and help protect critical systems, applications, and data. In this role, you will design, implement, and continuously improve detection and response processes across cloud, endpoint, identity, network, and application environments. You will work closely with security operations, infrastructure, engineering, and risk teams to identify threats, reduce exposure, and improve the organisation’s ability to respond quickly and effectively. Your responsibilities will include developing and tuning detection logic, correlation rules, alerts, dashboards, and automated response workflows across SIEM, EDR, SOAR, and related security platforms. You...

Learn more

Senior Security Engineer, Detection and Response

Added 08/09/2026

We are seeking a Senior Security Engineer, Detection and Response to strengthen the capability to identify, investigate and contain cyber threats across a complex technology environment. In this role, you will design, implement and improve detection strategies across cloud, endpoint, identity, network and application layers. You will work closely with security operations, infrastructure, engineering and risk teams to develop resilient monitoring and response processes that reduce attacker dwell time and protect critical systems and data. Your responsibilities will include developing and tuning detection rules, use cases and correlation logic within security monitoring platforms; analysing alerts and conducting advanced investigations; leading...

Learn more

Senior Cyber Threat Detection and Response Analyst

Added 14/09/2026

We are seeking a Senior Cyber Threat Detection and Response Analyst to lead the identification, investigation and containment of sophisticated cyber threats across a complex technology environment. You will monitor security events, analyse alerts and intelligence, and coordinate effective responses to incidents affecting networks, endpoints, cloud services, applications and critical data. The role will involve working closely with security engineering, infrastructure, risk and operational teams to strengthen defensive capabilities and reduce organisational exposure. Key responsibilities include developing and tuning detection rules, use cases and correlation logic; conducting advanced threat hunting across security telemetry; investigating indicators of compromise and suspicious activity;...

Learn more

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Cyber Security Engineer - Threat Detection

Added 11/09/2026

We are seeking a Cyber Security Engineer specialising in Threat Detection to help protect critical systems, applications and data from evolving cyber threats. You will join a security-focused team responsible for improving detection capabilities, investigating suspicious activity and supporting the ongoing development of a resilient security monitoring function. This role is suited to an analytical security professional who enjoys working across technology, operations and incident response. Your responsibilities will include designing, developing and tuning detection rules, alerts and use cases across SIEM, endpoint detection and response, network monitoring and cloud security platforms. You will monitor security events, investigate potential threats,...

Learn more

Cyber Security Engineer - Threat Detection

Added 09/09/2026

We are seeking a Cyber Security Engineer – Threat Detection to strengthen security monitoring and incident detection capabilities across a complex technology environment. In this role, you will design, develop and maintain detection use cases that identify suspicious activity across endpoints, networks, cloud platforms, applications and identity systems. You will work closely with security operations, infrastructure, engineering and risk teams to investigate threats, improve visibility and reduce the time required to detect and respond to security incidents. Key responsibilities include creating and tuning detection rules, alerts, dashboards and correlation logic within security monitoring and analytics platforms; analysing security events and...

Learn more

Senior Detection Engineer | SecOps

Added 02/11/2026

We are seeking a Senior Detection Engineer to strengthen a security operations function and help protect critical systems, applications and data. This role will focus on designing, developing and continuously improving detection capabilities across cloud, infrastructure, endpoint and application environments. You will work closely with security operations, incident response, threat intelligence, engineering and technology teams to identify emerging risks and turn them into effective, actionable detections. You will create and maintain detection logic, correlation rules, alerts and dashboards across SIEM, EDR, cloud-native security and other monitoring platforms. Responsibilities will include analysing security telemetry, tuning detection content to improve accuracy, reducing...

Learn more

Threat Detection Engineer

Added 30/10/2026

We are seeking a Threat Detection Engineer to design, develop and maintain effective security detections across a complex technology environment. You will work as part of a collaborative cyber security function, helping to identify suspicious activity, reduce exposure to emerging threats and improve the organisation’s ability to detect and respond to incidents. Your responsibilities will include creating and tuning detection rules across SIEM, endpoint, cloud and network security platforms. You will investigate alerts, assess their relevance and accuracy, and use threat intelligence, adversary techniques and incident findings to improve detection coverage. You will also support the development of use cases...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.