Industry: Cybersecurity / Cloud / Data & AI

About the Company
A global data and AI technology company is expanding its security operations team across Europe.

The organisation operates a large-scale cloud platform used by enterprises worldwide and is investing heavily in security automation, AI-enabled incident response, and advanced threat investigation capabilities.

The Role
We are looking for an experienced Lead Security Engineer – Incident Response to investigate complex security events, lead technical response activities, and help improve incident-response capabilities across a global environment.

This is an individual contributor role suited to someone with deep security expertise, strong cloud knowledge, and experience handling high-priority incidents in large enterprise or SaaS environments.

Key Responsibilities
Investigate and respond to complex security incidents and high-priority alerts.
Perform forensic analysis across cloud, endpoint, network, identity, and application data.
Determine incident scope, impact, root cause, and remediation requirements.
Participate in a distributed 24/7 incident-response and on-call model.
Lead technical investigations and provide guidance during critical security events.
Build tools and automation to improve detection, investigation, and response.
Apply AI and agentic technologies to streamline security operations.
Improve incident-response processes, playbooks, and technical standards.
Produce technical documentation and communicate investigation findings clearly.
Mentor less experienced security engineers through reviews, guidance, and knowledge sharing.
Requirements
7+ years of relevant security or incident-response experience with a Bachelor’s degree, or 5+ years with a Master’s degree.
Strong hands-on experience in Incident Response and Digital Forensics.
Deep expertise in at least one major cloud platform: AWS, Azure, or GCP, with familiarity across the others.
Broad understanding of enterprise and cloud security.
Strong capability in areas such as DFIR, reverse engineering, network security, access security, sandboxing, or compute security.
Experience working with enterprise SaaS environments.
Practical knowledge of SIEM and SOAR technologies.
Experience developing security tooling and automation.
Strong scripting skills.
Familiarity with AI-assisted coding and security workflows.
Experience with LLMs, AI agents, or agentic systems is highly desirable.
Nice to Have
Experience building AI-driven security automation.
Background operating incident-response tooling at large scale.
Strong experience investigating cloud-native security incidents.
Previous mentoring or technical leadership experience.
What’s Offered
Opportunity to work on security challenges within a large-scale global data and AI environment.
Remote and flexible working options depending on location.
International collaboration with experienced security and engineering teams.
Competitive compensation and regional employee benefits.
Professional development and technical learning opportunities.
Significant scope to influence security tooling, automation, and incident-response practices.
Ready to tackle complex cloud security incidents and help build the next generation of automated response capabilities? Click Apply to submit your CV and be considered for the role.