Senior Detection and Response Engineer

Location: Cambridge, UK – This position offers flexible working options, including predominantly remote work. Applicants should be based within a comfortable commuting distance of our office to attend onsite as required.

Are you experienced in detection and incident response, with an engineering mindset and a passion for improving the tools, automation and processes used to investigate threats?

As a Senior Detection & Response Engineer within our Cyber Security team, you’ll play a key role in strengthening Jagex’s detection and incident response capability across our studio and gaming environments. You’ll take ownership of escalated security investigations, going beyond routine alert handling to understand what happened, determine impact, and drive an effective response.

Alongside hands-on investigation, you’ll develop the tooling, detection logic, automation, runbooks and processes that enable us to identify and respond to threats more effectively. Working across a hybrid environment and alongside our external security operations capability, you’ll help ensure our monitoring and detection strategy focuses on the signals and risks that matter most.

What you’ll be doing:

• Lead investigations into escalated security events and incidents, developing hypotheses, collecting evidence and determining root cause and impact.
• Build and optimise detection rules, queries and monitoring logic across cloud, endpoint, network and application environments.
• Develop tooling and automation to improve security telemetry, alert enrichment, investigation workflows and response times.
• Conduct threat hunting using adversary behaviours, TTPs and frameworks such as MITRE ATT&CK, incorporating findings into security controls and detections.
• Create and continuously improve incident runbooks, playbooks and detection processes based on findings from real-world investigations.
• Work with our external SOC and internal engineering teams to strengthen monitoring coverage, investigate escalations and continuously improve our detection and response capability.
• This position will require participation in an on-call rotation.

What we’re looking for:

• Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data.
• Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations.
• Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts and MITRE ATT&CK principles.
• Practical knowledge of cloud environments and security controls, with the ability to apply detection and incident response practices across hybrid infrastructure.
• Background developing detection logic, runbooks, automation or security tooling; scripting knowledge such as PowerShell or Python would be advantageous.
• Knowledge of operating system internals and forensic investigation across Windows, macOS or Linux environments.

What we offer:

When you join Jagex you can look forward to a generous Perks & Benefits package including:

• Private Healthcare, including Dental Plan.
• Discretionary annual performance bonus.
• Minimum 6% Pension contributions.
• Life Insurance.
• Enhanced family leave policies from day 1.
• Flexible working hours.
• 25 days annual leave + Bank holidays & the option to buy/sell holidays + so much more!

About Jagex

We are Jagex: The RuneScape Company. Home to one of gaming’s most enduring success stories. We create deep, community-powered games with worlds that evolve, inspire, and endure. Our flagship MMORPG franchise, RuneScape, has welcomed over 300 million player accounts, inspiring generations of players across PC and mobile for 25 years.

As we begin our 26th year, we are accelerating our strategy to expand RuneScape into a broader ecosystem of forever games and connected experiences, grounded in a renewed commitment to integrity and fair play. This includes the reduction of monetisation mechanics, as well as the launch of RuneScape: DragonWilds into Steam Early Access in 2025, representing a major step in building a multi-genre future for the RuneScape universe. We remain focused on building enduring worlds, empowering player-led innovation, and laying the foundations for the boldest era in RuneScape’s history. For more information, visit www.jagex.com.

Headquartered in Cambridge, United Kingdom, we are home to passionate creators, storytellers, engineers, and even a few dreamers, all united by a single mission to shape the future of online worlds and empower players to make them their own. We’re looking for people to join us who share our ambitions and values. We foster an inclusive workplace built on trust, autonomy, and a shared passion for creating experiences that inspire our communities.

Our values guide everything we do: We Embrace Fellowship by collaborating and sharing openly. We Hone our Craft by always learning and improving; We Honour our Vows by being honest and transparent; We are our Customers’ Heroes by striving to understand our team & player needs, and We Seize The Day by making the most of every opportunity.

Join us. The next era of RuneScape and the next chapter of Jagex: The RuneScape Company starts now.

Inclusion & Accessibility Statement

We are committed to providing equal opportunities and creating an environment where everyone can thrive. We welcome applications from all backgrounds, and we recruit, develop, and promote based on merit and ability.

If you require any reasonable adjustments to support you during the recruitment process, please let us know when you’re invited to interview.

- Hands-on experience investigating security incidents, including developing investigation hypotheses, collecting artefacts and analysing endpoint, network and application data.- Strong working knowledge of SIEM and security monitoring tooling, including the ability to write and develop queries for complex investigations.- Understanding of adversary tactics, techniques and procedures (TTPs), offensive security concepts and MITRE ATT&CK principles.- Practical knowledge of cloud environments and security controls, with the ability to apply detection and incident response practices across hybrid infrastructure.- Background developing detection logic, runbooks, automation or security tooling; scripting knowledge such as PowerShell or Python would be advantageous.- Knowledge of operating system internals and forensic investigation across Windows, macOS or Linux environments.