Senior Cybersecurity Incident Responder

Job Description

#LI-KO1

Just imagine helping shape how the LEGO® Group detects, responds to, and recovers from most significant cybersecurity incidents.

About the role

As our Senior Cybersecurity Incident Responder, you'll join the Threat Detection & Response team within the LEGO Group Digital Security. You'll play a key role in strengthening our cyber defence capabilities by leading response to major incidents, improving detection and response processes, supporting security engineering initiatives, and helping build resilient operations. This is an opportunity to contribute to the continued development of a cyber defence function with strong support and investment behind it.

Required Qualifications

• Led major security incidents from detection through resolution and post-incident review.
• Conducted cybersecurity log analysis to investigate and resolve security incidents.
• Designed enterprise-grade security operations workflows that improved security operations effectiveness.
• Performed threat hunting and detection engineering activities to strengthen detection capabilities.
• Led incident response in a global enterprise environment.
• Identified and implemented automation opportunities within security operations processes.

Preferred Qualifications

• Improved detection capabilities to identify and respond to cybersecurity threats.
• Proactively identified gaps in detection and response processes before they lead incidents.
• Collaborated with cybersecurity engineering teams to align incident response practices with security architecture.
• Maintained incident response playbooks, runbooks, and operational processes.
• Any well-known industry certifications, such as GCFA or an equivalent, are considered a plus.

What you'll build

• Lead major security incidents from initial detection through recovery and post-incident review.
• Improve playbooks, workflows, and operational processes that strengthen response effectiveness.
• Research and evaluate new detection techniques to keep capabilities ahead of evolving threats.
• Create automation opportunities that reduce manual effort and improve operational efficiency.
• Mentor teammates and contribute to raising quality standards across the team.
• Build strong partnerships with analysts, engineers, intelligence specialists, forensic investigators, business stakeholders, and security leaders.

If you've worked in a role where you led incident response activities in a global enterprise environment and helped shape security operations capabilities, you'll feel at home here. Experience across cloud environments and security operations is particularly valuable. What matters most is your ability to pair deep technical expertise with a continuous improvement mindset.

Life on the team

You'll join a close-knit team responsible for end-to-end detection and response of cybersecurity incidents. We support one another, share knowledge openly, and work together to build resilience across the organisation. You'll have the opportunity to learn from experienced colleagues while contributing your own expertise. We're looking for someone who brings critical thinking, thoughtful leadership, problem-solving capability, strategic perspective, and the flexibility to adapt as our capabilities continue to evolve.

What success looks like

In your first year, you'll become a trusted contributor to alert and incident management while developing a deep understanding of the environment and ways of working across the LEGO Group. You'll take ownership of incident handling, identify meaningful improvements to workflows, and help strengthen detection and response effectiveness. Looking ahead, you'll contribute to ongoing investments in tools, processes, and capabilities as we continue building an increasingly mature cyber defence function. You'll work closely with security analysts, threat intelligence specialists, threat hunters, engineers, digital forensic investigators, key business stakeholders, and Digital Security leadership.

Applications are reviewed on an ongoing basis. However, please note we do amend or withdraw our jobs and reserve the right to do so at any time, including prior to any advertised closing date. So, if you're interested in this role we encourage you to apply as soon as possible.

What’s in it for you?

Here is what you can expect:

Family Care Leave - We offer enhanced paid leave options for those important times.

Insurances – All colleagues are covered by our life and disability insurance which provides protection and peace of mind.

Wellbeing - We want our people to feel well and thrive. We offer resources and benefits to nurture physical and mental wellbeing along with opportunities to build community and inspire creativity.

Colleague Discount – We know you'll love to build, so from day 1 you will qualify for our generous colleague discount.

Bonus - We do our best work to succeed together. When goals are reached and if eligible, you'll be rewarded through our bonus scheme.

Your workplace: Your workplace will be the office, store or factory specified in this advert.

Hybrid Working: Our hybrid work model, Best of Both offers you the option of flexibility to work from home up to two days per week. Your People Leader will discuss the principles of the model, including how this option applies to your role and team.

Learn more about our benefits, culture and workplace experience here

Children are our role models. Their curiosity, creativity and imagination inspire everything we do. We strive to create a diverse, dynamic and inclusive culture of play at the LEGO Group, where everyone feels safe, valued and they belong.

The LEGO Group is highly committed to equal employment opportunity and equal pay and seeks to encourage applicants from all backgrounds (eg. sex, gender identity or expression, race/ethnicity, national origin, sexual orientation, disability, age and religion) to apply for roles in our team.

The LEGO Group is fully committed to Children’s Rights and Child Wellbeing across the globe. Candidates offered positions with high engagement with children are required to take part in Child Safeguarding Background Screening, as a condition of the offer.

Thank you for sharing our global commitment to Children’s Rights.

Just imagine building your dream career.

Then make it real.

Join the LEGO® team today.