Engineer - E2 - Group Security Operations Centre in London

You will act as a senior technical leader within the team, providing subject matter expertise and direction across threat hunting activities. A core part of your role will involve designing and executing proactive, hypothesis-driven threat hunts, informed by high-quality threat intelligence and operational insights. You will take ownership of translating intelligence into actionable hunting strategies that identify previously unknown threats and adversary behaviours within the environment.

You will conduct detailed adversary modelling and simulate realistic attack scenarios to inform targeted hunts. This will require deep analysis of telemetry across multiple domains, including endpoint detection and response, cloud platforms, identity services, and network data sources. Through this, you will identify gaps in visibility, detection, and response capabilities.

Collaboration will be central to your role. You will work closely with stakeholders across Cyber Operations and the wider business to validate findings, challenge assumptions, and ensure outputs are both accurate and actionable. You will partner with Cyber Threat Intelligence and Threat Detection Engineering teams to translate hunt findings into new or improved detections, contributing directly to strengthening defensive capabilities.

You will be responsible for producing clear, high-quality reporting and communicating findings effectively to a range of audiences, from technical teams through to senior leadership. Your insights will directly influence remediation activities, inform security hardening priorities, and support strategic tooling decisions.

You will also contribute to the design and delivery of cyber exercises, including tabletop scenarios grounded in real-world threats and organisational context. The outcomes of these exercises will be used to generate new hunting hypotheses and enhance the organisation's overall cyber resilience.

Alongside operational delivery, you will play a key role in maturing the threat hunting capability. This includes developing scalable playbooks, establishing repeatable frameworks, and embedding structured, intelligence-led approaches that position threat hunting as a strategic function within Cyber Operations.

For this role, you will have:

• Demonstrable experience in a senior role within a cyber security function (e.g. SOC, Incident Response, or Penetration Testing), including line management or team development responsibilities
• Proven ability to communicate complex technical concepts clearly to both technical and non-technical audiences, tailoring messaging appropriately
• Extensive hands-on experience in security monitoring, threat hunting, and cyber incident response across enterprise environments
• Strong practical experience with SIEM, EDR, identity services, and network-based telemetry, with proficiency in Kusto Query Language (KQL)
• A deep understanding of the MITRE ATT&CK framework, adversary tradecraft, and common tactics, techniques, and procedures (TTPs), including associated defensive measures
• Strong interpersonal skills with the ability to build trusted relationships across technical and business stakeholders, combined with a proactive, analytical mindset and a commitment to continuous improvement

Our customer first behaviours put customers and members at the heart of how we work together. They are the set of behaviours that every colleague needs to display, in every role:

• Feel what customers feel - We step into our customers' shoes, using their feedback and insights to empathise with them and to understand their needs, so that every decision we make starts and finishes with our customers in mind
• Say it straight - We are brave in speaking out and saying what we think – we're honest and direct with good intent, openly sharing diverse perspectives to reach the best conclusions and using language everyone can understand
• Push for better - We don't settle for mediocrity, we challenge the status quo, taking responsibility for continuous improvement and personal development
• Get it done - We prioritise what will have the greatest impact, we are decisive, and we take accountability for delivering brilliant customer outcomes

You can strengthen your application by showing how our customer first behaviours resonate with you, and where you may have already demonstrated these.

There are all sorts of employee benefits available at Nationwide, including:

• Access to private medical insurance
• A highly competitive pension to help you build a strong foundation for retirement
• Access to an annual performance related bonus
• Training and development to help you progress your career
• A great selection of additional benefits through our salary sacrifice scheme
• Life assurance to provide peace of mind for you and your loved ones in the event of your death
• Wellhub – access to a range of free and paid options for health and wellness
• Up to 2 days of paid volunteering a year

If this role is for you, please click the 'Apply Now' button. You'll need to attach your up-to-date CV and answer a few quick questions for us. We respond to everyone, so we will be in contact shortly after the closing date to let you know the outcome of your application.