Lead Detection & Response Engineer

Help defend one of the UK’s largest organisations against evolving cyber threats. As a Lead Detection & Response Engineer within the Cyber Defence Centre, you’ll play a key role in protecting the organisation by leading a team of engineers responsible for identifying, investigating and responding to security events and incidents.

This role combines deep technical expertise with people leadership and strategic delivery. You’ll establish technical standards, shape the evolution of detection and response capabilities, and lead initiatives that strengthen cyber resilience across the organisation.

What you’ll do:

• Lead and coordinate cyber security investigations, driving effective analysis, containment, remediation and lessons learned activities.
• Provide technical guidance and support to engineers during incidents, investigations and threat-led activities.
• Develop and continuously improve detection and response capabilities to strengthen cyber defence outcomes.
• Support threat hunting, investigations and proactive cyber defence activities to identify and reduce cyber risk.
• Act as a technical authority for security engineering, influencing policies, standards, roadmaps and investment decisions.
• Lead, coach and develop Detection & Response Engineers, building capability and supporting an inclusive, high-performing team culture.

• Strong capability in Security Engineering, with proven experience in a Security Operations, Cyber Defence, Detection & Response or Incident Response environment.
• Experience leading, coaching and developing technical colleagues within a high-performing team environment.
• Strong understanding of incident response methodologies, attacker behaviours and cyber attack lifecycles.
• Experience of threat hunting, investigation and cyber defence activities to identify and respond to security threats.
• Strong analytical and problem-solving skills, with the ability to assess risk and make effective decisions during investigations and incidents.
• Excellent stakeholder management skills, with the ability to influence and collaborate effectively across technical and non-technical audiences.

And any experience of this would be really useful

• Experience in Digital Forensics activities and investigations.
• Experience contributing to or shaping cyber security policies, standards or secure design patterns.
• Experience automating operational processes to improve detection and response effectiveness and efficiency.

• 30 days’ holiday, with bank holidays on top.
• A generous pension contribution.
• Discretionary annual performance-related bonus.
• Private medical benefit.
• Access to wellbeing initiatives and colleague support programmes.
• Opportunities for ongoing learning, career development and internal mobility.

Our continued dedication to helping Britain prosper means that as a colleague you can make a difference to customers, businesses and communities.

Together we have a key role to play in shaping the bank of the future, whilst the scale and reach of our Group means you’ll continue to have opportunities to learn, grow and develop.

We’re focused on creating a values-led culture, and our approach to inclusion and diversity means that we all have the chance to make a real difference, together., Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop.

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative., At Lloyds Banking Group, we’re driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you’ll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you’ll have many opportunities to learn, grow and develop.

We keep your data safe. So, we’ll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We’ll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.

We’re focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.