Junior Detection & Response Engineer

End Date

Salary Range

We support flexible working – click here for more information on flexible working options

Flexible Working Options

Job Description Summary

Job Description

JOB TITLE: Junior Detection & Response Engineer

SALARY: £48,987 - £54,430

LOCATION: Edinburgh, Bristol, Leeds or Manchester

HOURS: Full-time – 35 hours

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy. 

What you’ll be doing…

This role sits at the heart of cyber defence, combining analytical depth with real operational impact. It focuses on designing and continuously refining detection rules informed by threat intelligence, modelling and real‑world investigations, ensuring controls remain effective against evolving risks. The position leads end‑to‑end triage and investigation of security events, using logs and telemetry to reach clear, evidence‑based conclusions and escalate high‑risk activity with structured findings and practical recommendations. It also includes proactive threat hunting and modelling to build insight into attacker behaviour and emerging risks, alongside improving response playbooks and introducing automation to make detection and response faster, safer and more consistent. Learning is captured and shared through documentation and post‑incident reviews, helping the team continuously raise its standards and resilience.

Why Join us?

If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing business that’s shaping finance as a force for good. If you’re after a role where you can have an impact and do the best work of your career, you’ve just found it.

What we’re looking for;

• Strong understanding of threat detection platforms, detection lifecycle concepts and investigation methods (1-2+ years experience)
• Ability to analyse security logs, events and telemetry to reach clear, reasoned conclusions
• Knowledge of attacker behaviour and Tactics, Techniques and Procedures (TTPs) (1-2+ years experience).
• Understanding of detection logic, including SIEM use cases and detection‑as‑code (DaC) concepts
• Awareness of advanced cyber defence concepts and how to apply them in practice
• Willingness to participate in an on‑call rota and regular weekend working where required.

We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

This is a place for you…

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. And, as a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role with a disability, long-term health or neurodivergent condition through the Disability Confident Scheme.

We also offer a wide-ranging benefits package, which includes…

• A generous pension contribution of up to 15%

• An annual bonus award, subject to Group performance
• Share schemes including free shares
• Benefits you can adapt to your lifestyle, such as discounted shopping
• 28 days’ holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies

Ready for a career where you’ll learn and thrive? Apply today and find out more.

At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.

We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks.  We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person. 

We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.