Senior Detection & Response Engineer, Cyber Defense

Reference: o41t0vu6udlnj0df0mym

We are seeking a Senior Detection & Response Engineer, Cyber Defense to strengthen and mature our security operations capability. This is a hands-on role for an experienced cyber security professional who can identify emerging threats, develop effective detection content and lead the response to complex security incidents across a diverse technology environment.

You will design, build and continuously improve detections across cloud, endpoint, identity, network and application platforms. Working with security operations and engineering teams, you will translate threat intelligence and adversary behaviours into practical use cases, analytics and alerting within SIEM, EDR and related security tooling. You will tune rules to improve accuracy, reduce false positives and ensure detections are measurable, maintainable and aligned with current risks.

The role will involve investigating and managing high-severity incidents, coordinating containment and eradication activities, and producing clear technical and executive-level updates. You will lead or support threat hunting exercises, forensic investigations and post-incident reviews, ensuring lessons learned are converted into improvements across controls, playbooks and operating procedures. You will also contribute to automation, playbook development and the ongoing development of incident response processes, metrics and reporting.

We are looking for significant experience in cyber defence, security engineering, incident response or a closely related discipline, together with a strong understanding of the MITRE ATT&CK framework and common attack techniques. You should be confident working with log analysis, scripting and query languages such as KQL, SPL or equivalent, and have practical experience with SIEM, EDR, cloud security and identity technologies. Experience leading incidents, threat hunts or detection engineering programmes is highly desirable.

Excellent communication and collaboration skills are essential, as you will work with technical teams, stakeholders and third-party specialists. Relevant professional certifications, such as GIAC, CISSP, CISM or equivalent experience, are welcomed. You will bring sound judgement, curiosity and a continuous improvement mindset, along with the ability to prioritise effectively in a fast-moving environment.

COMPETITIVE SALARY
Added 04/11/2026
Reference: o41t0vu6udlnj0df0mym

Senior Detection & Response Engineer, Cyber Defense

London, England, United Kingdom Permanent Incident Response

Other similar jobs

Senior Security Engineer - Detection & Response

Added 23/09/2026

We are seeking a Senior Security Engineer – Detection & Response to strengthen and evolve our security operations capability. In this role, you will design, implement and maintain detection and response systems that identify, investigate and contain threats across cloud, endpoint, identity, network and application environments. You will work closely with security operations, infrastructure, engineering and risk teams to improve visibility, reduce response times and support the continuous improvement of the organisation’s security posture. Your responsibilities will include developing and tuning detection rules, analytic queries, dashboards and automated response workflows; investigating complex security alerts and incidents; leading technical response activities...

Learn more

Senior Security Engineer, Detection and Response

Added 09/09/2026

We are seeking a Senior Security Engineer, Detection and Response to strengthen a mature security operations capability and help protect critical systems, applications, and data. In this role, you will design, implement, and continuously improve detection and response processes across cloud, endpoint, identity, network, and application environments. You will work closely with security operations, infrastructure, engineering, and risk teams to identify threats, reduce exposure, and improve the organisation’s ability to respond quickly and effectively. Your responsibilities will include developing and tuning detection logic, correlation rules, alerts, dashboards, and automated response workflows across SIEM, EDR, SOAR, and related security platforms. You...

Learn more

Senior Security Engineer, Detection and Response

Added 08/09/2026

We are seeking a Senior Security Engineer, Detection and Response to strengthen the capability to identify, investigate and contain cyber threats across a complex technology environment. In this role, you will design, implement and improve detection strategies across cloud, endpoint, identity, network and application layers. You will work closely with security operations, infrastructure, engineering and risk teams to develop resilient monitoring and response processes that reduce attacker dwell time and protect critical systems and data. Your responsibilities will include developing and tuning detection rules, use cases and correlation logic within security monitoring platforms; analysing alerts and conducting advanced investigations; leading...

Learn more

Senior Cyber Threat Detection and Response Analyst

Added 14/09/2026

We are seeking a Senior Cyber Threat Detection and Response Analyst to lead the identification, investigation and containment of sophisticated cyber threats across a complex technology environment. You will monitor security events, analyse alerts and intelligence, and coordinate effective responses to incidents affecting networks, endpoints, cloud services, applications and critical data. The role will involve working closely with security engineering, infrastructure, risk and operational teams to strengthen defensive capabilities and reduce organisational exposure. Key responsibilities include developing and tuning detection rules, use cases and correlation logic; conducting advanced threat hunting across security telemetry; investigating indicators of compromise and suspicious activity;...

Learn more

AMBG Senior Cyber Defense Architect

Added 11/09/2026

We are seeking a Senior Cyber Defense Architect to define and advance enterprise-wide cybersecurity capabilities across complex technology environments. In this role, you will develop security architecture strategies that protect critical systems, applications, data, and infrastructure against evolving threats. You will translate business and technology requirements into practical, resilient security designs and provide technical leadership across architecture, engineering, operations, and risk management teams. Your responsibilities will include designing and reviewing cyber defense architectures, security controls, detection and response capabilities, identity and access management models, network protections, cloud security patterns, and data protection solutions. You will assess emerging threats and technologies,...

Learn more

Security Engineer (Detection & Response)

Added 07/10/2026

We are seeking a Security Engineer (Detection & Response) to strengthen our ability to identify, investigate, and contain cyber threats across a complex technology environment. In this role, you will design, implement, and continuously improve security monitoring and detection capabilities across cloud, endpoint, network, identity, and application platforms. You will work closely with security operations, infrastructure, engineering, and risk teams to reduce exposure, improve visibility, and support a resilient security posture. Your responsibilities will include developing and tuning detection rules, analytics, and alerting logic within SIEM, EDR, SOAR, and related security platforms. You will investigate suspicious activity, conduct threat hunting,...

Learn more

Detection & Response Security Engineer, Threat Intelligence

Added 22/09/2026

We are seeking a Detection & Response Security Engineer, Threat Intelligence, to strengthen cyber defence capabilities across a complex and evolving technology environment. In this role, you will monitor the threat landscape, identify emerging risks, and translate intelligence into practical detection and response improvements. You will work closely with security operations, incident response, engineering, and risk teams to investigate suspicious activity, improve visibility, and help protect critical systems, data, and users. Key responsibilities will include collecting, analysing, and validating threat intelligence from open, commercial, and internal sources; developing and maintaining indicators of compromise, detection rules, and threat-hunting hypotheses; and mapping...

Learn more

Cyber Defense Engineer

Added 25/09/2026

We are seeking a Cyber Defense Engineer to help protect critical systems, networks, applications, and data from evolving cyber threats. In this role, you will monitor security events, investigate suspicious activity, and coordinate timely responses to incidents across cloud, on-premises, and hybrid environments. You will work closely with infrastructure, software development, and risk teams to strengthen defensive capabilities and reduce the organisation’s overall attack surface. Your responsibilities will include analysing alerts from security information and event management platforms, endpoint detection and response tools, firewalls, identity systems, and other security technologies. You will perform threat hunting, support digital forensics, develop and...

Learn more

Security Expert-Detection & Response

Added 23/10/2026

We are seeking an experienced Security Expert – Detection & Response to strengthen cyber defence capabilities and help protect critical systems, data and services. This role will lead the identification, investigation and resolution of security incidents, while improving the organisation’s ability to detect and respond to emerging threats. You will monitor and investigate alerts from security information and event management, endpoint detection and response, network monitoring and cloud security platforms. Working across technical and business teams, you will assess potential threats, perform triage, contain incidents and coordinate remediation. You will also contribute to forensic investigations, root-cause analysis and post-incident reviews,...

Learn more

Security Detection & Response Specialist

Added 21/10/2026

We are seeking a Security Detection & Response Specialist to help protect critical systems, data and services from evolving cyber threats. Working within a collaborative security function, you will monitor, investigate and respond to security events across cloud, network, endpoint and application environments. You will play a key role in improving detection capability, reducing risk and supporting the organisation’s wider security objectives. Your responsibilities will include monitoring alerts from security information and event management (SIEM), endpoint detection and response (EDR), identity and cloud security platforms, as well as triaging and investigating suspected incidents. You will lead or support incident response...

Learn more

Security Detection & Response I

Added 07/09/2026

We are seeking a Security Detection & Response I professional to support the monitoring, investigation, and resolution of cybersecurity events across a varied technology environment. In this role, you will help protect systems, applications, networks, and data by reviewing security alerts, identifying potential threats, and coordinating timely responses. You will work with experienced security specialists and technology teams to assess risk, contain incidents, and contribute to continuous improvements in security operations. Your responsibilities will include monitoring alerts from security information and event management, endpoint detection, identity, network, and cloud security tools; performing initial triage and investigation of suspected incidents; documenting...

Learn more

Cyber Defense Incident Responder - Associate Director

Added 18/09/2026

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the identification, investigation, containment, and resolution of sophisticated cybersecurity incidents. This role will provide senior-level technical direction during high-impact events, coordinate response activities across security, technology, risk, legal, and business teams, and help strengthen the organisation’s overall cyber resilience. The successful candidate will be comfortable operating in a fast-paced environment where sound judgment, clear communication, and decisive action are essential. Responsibilities include managing the end-to-end incident response lifecycle, including detection triage, scoping, forensic investigation, threat containment, eradication, recovery, and post-incident review. You will analyse security alerts and...

Learn more

Cyber Defense Incident Responder - Associate Director

Added 18/09/2026

We are seeking a Cyber Defense Incident Responder – Associate Director to lead the identification, investigation, containment, and resolution of complex cybersecurity incidents. This role will provide senior-level direction during high-impact events, helping protect critical systems, data, and business operations from evolving cyber threats. The successful candidate will combine strong technical expertise with sound judgment, clear communication, and the ability to coordinate effectively across security, technology, risk, legal, and business teams. Key responsibilities include overseeing the end-to-end incident response lifecycle, from triage and forensic investigation through containment, eradication, recovery, and post-incident review. You will lead investigations into malware, ransomware, phishing,...

Learn more

Cyber Defense Incident Responder - Assistant Director

Added 18/09/2026

We are seeking an experienced Cyber Defense Incident Responder to lead the identification, investigation, containment, and resolution of cybersecurity incidents across a complex technology environment. In this senior role, you will provide strategic direction and operational leadership for incident response activities, helping to protect critical systems, data, and services from evolving cyber threats. You will coordinate high-priority investigations, assess business impact, and ensure incidents are managed efficiently from initial detection through recovery and post-incident review. Responsibilities will include leading incident response operations, developing and improving response procedures, and overseeing the use of security monitoring, endpoint detection, network analysis, and threat...

Learn more

Cyber Defense Incident Responder - Assistant Director

Added 18/09/2026

We are seeking a Cyber Defense Incident Responder – Assistant Director to lead the identification, investigation, containment, and recovery of cybersecurity incidents across a complex technology environment. This senior role will provide operational leadership to incident response activities, helping protect critical systems, data, and services from evolving cyber threats. You will oversee the coordination of high-severity incidents, ensure timely escalation, and support clear communication with technical teams, senior stakeholders, and relevant external parties. Key responsibilities include developing and maintaining incident response procedures, playbooks, and escalation frameworks; directing investigations into suspected security breaches, malware infections, unauthorized access, and other cyber events;...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.