Security Expert-Detection & Response

Reference: digz9am777o5nkfr0vby

We are seeking an experienced Security Expert – Detection & Response to strengthen cyber defence capabilities and help protect critical systems, data and services. This role will lead the identification, investigation and resolution of security incidents, while improving the organisation’s ability to detect and respond to emerging threats.

You will monitor and investigate alerts from security information and event management, endpoint detection and response, network monitoring and cloud security platforms. Working across technical and business teams, you will assess potential threats, perform triage, contain incidents and coordinate remediation. You will also contribute to forensic investigations, root-cause analysis and post-incident reviews, ensuring lessons learned are translated into practical improvements.

Key responsibilities include developing and tuning detection rules, creating investigative playbooks and response procedures, and improving security monitoring coverage across infrastructure, applications, identities and cloud environments. You will support threat hunting activities, use threat intelligence to identify relevant attack techniques, and help validate controls through simulations, testing and continuous improvement. Clear and accurate incident reporting, risk communication and escalation to senior stakeholders will also be an important part of the role.

The successful candidate will have substantial experience in cyber security operations, incident response, threat detection or a related discipline. You should be confident analysing complex events and logs, correlating data from multiple sources, and making sound decisions under pressure. Practical knowledge of security monitoring technologies, endpoint and network security, identity systems, cloud platforms and common attack frameworks is essential.

Relevant professional certifications, such as those covering incident handling, security operations, digital forensics or threat intelligence, would be advantageous. You will need strong communication and collaboration skills, a methodical approach, and the ability to explain technical risks clearly to both specialist and non-specialist audiences. A proactive mindset, commitment to continuous learning and willingness to participate in an incident response rota may also be required.

COMPETITIVE SALARY
Added 23/10/2026
Reference: digz9am777o5nkfr0vby

Security Expert-Detection & Response

London, England, United Kingdom Permanent Intrusion Detection

Other similar jobs

Security Operations Engineer, AWS Security Cloud Response, Amazon Security Cloud Security Response

Added 14/10/2026

We are seeking a Security Operations Engineer to support cloud security response activities in a fast-paced, highly distributed environment. In this role, you will help protect cloud infrastructure, services, and customer data by investigating security events, coordinating incident response, and improving detection and response capabilities. You will work closely with security engineering, infrastructure, software development, and operations teams to identify threats, contain incidents, and reduce the likelihood of recurrence. Your responsibilities will include monitoring and analysing security alerts, conducting technical investigations, triaging suspected compromises, and supporting the full incident management lifecycle. You will develop and maintain incident response procedures, playbooks,...

Learn more

Security Operations Engineer, AWS Security Cloud Response

Added 21/10/2026

We are seeking a Security Operations Engineer, AWS Security Cloud Response to help protect cloud environments, investigate security events and strengthen operational resilience. This role will suit an experienced security professional who is confident working across AWS services, responding to incidents and collaborating with technical teams in a fast-paced environment. You will monitor and investigate alerts from cloud security, identity, endpoint and network monitoring tools, assessing potential threats and coordinating appropriate responses. Responsibilities will include triaging incidents, conducting root-cause analysis, containing and remediating security issues, and maintaining accurate case records. You will also contribute to threat hunting, vulnerability investigations and...

Learn more

Incident Response Manager, Security Operations Group | Worldwide Operations Security

Added 07/10/2026

We are seeking an experienced Incident Response Manager to lead the coordination, investigation, and resolution of security incidents across a complex, globally distributed operational environment. This role will oversee incident response activities from initial detection and triage through containment, eradication, recovery, and post-incident review. You will work closely with security operations, threat intelligence, cyber investigations, technology, legal, risk, and business teams to protect people, facilities, information, and critical services. Key responsibilities include managing high-severity incidents and serving as an escalation point during active events; establishing incident priorities, response plans, communications, and decision-making processes; directing investigations involving cyber threats, insider risk,...

Learn more

Product Security Incident Response Program Manager (m/f/d)

Added 29/10/2026

We are seeking a Product Security Incident Response Programme Manager (m/f/d) to lead the planning, coordination and continuous improvement of our response to product security incidents. In this role, you will help protect customers, products and services by ensuring that security vulnerabilities and incidents are assessed, managed and resolved efficiently across a complex, international environment. You will own and develop the product security incident response framework, including policies, processes, playbooks, escalation paths and communication procedures. Working closely with product security, engineering, software development, legal, communications, privacy and customer-facing teams, you will coordinate the end-to-end response to incidents, from initial triage...

Learn more

Senior Security Monitoring and Response Analyst

Added 22/10/2026

We are seeking a Senior Security Monitoring and Response Analyst to strengthen a busy cyber security operations function. This role will lead the detection, investigation and response to security incidents, helping to protect critical systems, services and information across a complex technology environment. You will monitor security alerts and events using security information and event management (SIEM), endpoint detection and response, network monitoring and other security tools. You will assess potential threats, investigate suspicious activity, determine impact and coordinate appropriate containment, eradication and recovery actions. The role will also involve providing expert guidance to analysts, supporting incident escalation and ensuring...

Learn more

Security Detection & Response Specialist

Added 21/10/2026

We are seeking a Security Detection & Response Specialist to help protect critical systems, data and services from evolving cyber threats. Working within a collaborative security function, you will monitor, investigate and respond to security events across cloud, network, endpoint and application environments. You will play a key role in improving detection capability, reducing risk and supporting the organisation’s wider security objectives. Your responsibilities will include monitoring alerts from security information and event management (SIEM), endpoint detection and response (EDR), identity and cloud security platforms, as well as triaging and investigating suspected incidents. You will lead or support incident response...

Learn more

Security Engineer, Incident Response

Added 08/10/2026

We are seeking a Security Engineer, Incident Response to help protect critical systems, applications, and data from evolving cyber threats. In this role, you will investigate security alerts and incidents, coordinate effective containment and remediation, and help strengthen the organisation’s overall detection and response capabilities. You will work closely with security operations, infrastructure, engineering, application, and business teams to manage incidents from initial triage through recovery and post-incident review. Your responsibilities will include monitoring and analysing alerts from endpoint, network, identity, cloud, and application security tools; conducting forensic investigations; identifying attack techniques, indicators of compromise, and root causes; and maintaining...

Learn more

Security Engineer (Detection & Response)

Added 07/10/2026

We are seeking a Security Engineer (Detection & Response) to strengthen our ability to identify, investigate, and contain cyber threats across a complex technology environment. In this role, you will design, implement, and continuously improve security monitoring and detection capabilities across cloud, endpoint, network, identity, and application platforms. You will work closely with security operations, infrastructure, engineering, and risk teams to reduce exposure, improve visibility, and support a resilient security posture. Your responsibilities will include developing and tuning detection rules, analytics, and alerting logic within SIEM, EDR, SOAR, and related security platforms. You will investigate suspicious activity, conduct threat hunting,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud security operations across a complex AWS environment. This role will manage a team of security engineers and coordinate the detection, investigation, containment, and recovery of security incidents affecting cloud infrastructure, applications, and data. You will establish effective response processes, improve operational readiness, and ensure incidents are handled quickly, consistently, and with clear communication to technical and business stakeholders. Responsibilities include developing and maintaining incident response playbooks, leading investigations into suspected compromises, and coordinating forensic analysis, remediation, and post-incident reviews. You will partner with CloudOps, infrastructure, software engineering,...

Learn more

Security Engineering Manager - Incident Response, AWS CloudOps

Added 06/10/2026

We are seeking a Security Engineering Manager to lead incident response and cloud operations security across a complex, highly available environment. This role will manage a team of security engineers and coordinate the organisation’s response to cyber incidents, from initial detection and triage through containment, eradication, recovery, and post-incident improvement. You will establish clear operational processes, strengthen monitoring and detection capabilities, and ensure that security events are handled consistently, rapidly, and with appropriate business communication. You will oversee the development and maintenance of incident response plans, playbooks, escalation procedures, and crisis exercises. Working closely with infrastructure, platform engineering, application development,...

Learn more

Security Incident Response Manager

Added 23/09/2026

We are seeking an experienced Security Incident Response Manager to lead the detection, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. In this role, you will manage the incident response function, coordinate activity across security operations, infrastructure, engineering, legal, privacy, communications, and business teams, and ensure that incidents are handled efficiently and consistently. You will establish clear escalation procedures, define incident severity criteria, and provide calm, decisive leadership during high-impact events. Key responsibilities include overseeing the full incident lifecycle, from initial triage and forensic investigation through remediation, recovery, and post-incident review. You will maintain and improve...

Learn more

Senior Security Engineer - Detection & Response

Added 23/09/2026

We are seeking a Senior Security Engineer – Detection & Response to strengthen and evolve our security operations capability. In this role, you will design, implement and maintain detection and response systems that identify, investigate and contain threats across cloud, endpoint, identity, network and application environments. You will work closely with security operations, infrastructure, engineering and risk teams to improve visibility, reduce response times and support the continuous improvement of the organisation’s security posture. Your responsibilities will include developing and tuning detection rules, analytic queries, dashboards and automated response workflows; investigating complex security alerts and incidents; leading technical response activities...

Learn more

Senior Security Incident Response Analyst

Added 23/09/2026

We are seeking a Senior Security Incident Response Analyst to lead the investigation, containment, and resolution of complex cybersecurity incidents across a diverse technology environment. In this role, you will monitor and analyse security alerts, coordinate rapid responses to suspected breaches, and provide expert guidance throughout the incident lifecycle. You will work closely with security operations, infrastructure, engineering, legal, risk, and business teams to assess impact, minimise disruption, and restore secure operations. Your responsibilities will include developing and refining incident response procedures, conducting detailed analysis of endpoint, network, identity, cloud, and application data, and performing forensic investigations to determine attack...

Learn more

Associate Manager - Cyber Security Incident Response

Added 23/09/2026

We are seeking an experienced Associate Manager – Cyber Security Incident Response to help protect critical systems, data and services from evolving cyber threats. In this role, you will support the management of security incidents from initial detection through to containment, eradication and recovery, ensuring that response activities are coordinated, timely and well documented. You will work closely with security operations, infrastructure, applications, risk, legal, privacy and business stakeholders to assess impact, determine priorities and guide effective remediation. Your responsibilities will include overseeing the triage and investigation of suspected security incidents, validating alerts and coordinating appropriate escalation. You will help...

Learn more

Detection & Response Security Engineer, Threat Intelligence

Added 22/09/2026

We are seeking a Detection & Response Security Engineer, Threat Intelligence, to strengthen cyber defence capabilities across a complex and evolving technology environment. In this role, you will monitor the threat landscape, identify emerging risks, and translate intelligence into practical detection and response improvements. You will work closely with security operations, incident response, engineering, and risk teams to investigate suspicious activity, improve visibility, and help protect critical systems, data, and users. Key responsibilities will include collecting, analysing, and validating threat intelligence from open, commercial, and internal sources; developing and maintaining indicators of compromise, detection rules, and threat-hunting hypotheses; and mapping...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.