Senior Detection & Response Engineer, Cyber Defense

Role description

Role Overview

Nscale is hiring a Senior Detection & Response Engineer in Cyber Defense to decide what Nscale detects, command incident response, and automate recurring security work across enterprise, cloud, production, data centre, and operational technology environments.

What You Will Do

The role involves detection engineering, automation, and platform engineering, as well as incident command and preparedness. The engineer will work with AI agents to build detection logic, automate recurring enrichment, triage, containment, case handling, and reporting, and command security incidents.

Why It Might Be a Fit

The ideal candidate has 5+ years of experience in detection engineering, incident response, security operations, threat hunting, security engineering, or related roles, and can assess what a rule catches, what it misses, and how it will behave in production, with a focus on overall coverage.

Requirements

• 5+ years in detection engineering, incident response, security operations, threat hunting, security engineering, or related roles
• Detection judgement: the ability to assess what a rule catches, what it misses, and how it will behave in production, with a focus on overall coverage
• Fluency in modern attacker tradecraft and its telemetry, including credential theft, session abuse, phishing, malware execution, persistence, privilege escalation, lateral movement, command and control, and exfiltration
• Working knowledge of Windows, macOS, and Linux internals, including persistence techniques and logging
• Experience leading, or playing a central role in, a significant incident: running the bridge, setting priorities, and keeping leadership informed while maintaining the technical detail
• Experience building in and securing public cloud environments such as AWS and GCP, plus hands-on investigations across endpoint, identity, cloud, SaaS, network, or production workloads
• The ability to automate repeat work using query languages, scripting, APIs, or workflow automation
• Sound containment judgement and a calm, methodical approach when facts are incomplete or contradictory
• A willingness to challenge automated conclusions. You'll validate AI-generated analysis and detection logic rather than treating them as authoritative

Benefits

• Highly competitive UK compensation package (base + bonus + equity)
• Dynamic progression plan tailored to your ambitions
• Human-First Flexibility: We treat you as humans first. Our flexible workplace trusts Nscalers to deliver, giving you the autonomy to shape your day around life's moments