Threat Detection Engineer

Role Overview

This role is situated within the Threat Detection & Engineering sub-team of the Group Security Operations Centre (GSOC), falling under the Security & Resilience function. The core responsibility is to assist Nationwide in rapidly identifying malicious activity by creating and maintaining high-quality security detections across critical security platforms and telemetry sources.

The primary purpose of this role is to transform security telemetry, threat intelligence, attack-simulation outcomes, and operational requirements into actionable detection content for SOC teams. By enhancing visibility, minimizing false positives, and enabling earlier identification of suspicious activity, this role contributes significantly to reducing cyber risk and protecting the services relied upon by members.

Working Arrangements

Nationwide supports hybrid working wherever possible. This approach helps foster more rewarding relationships by bringing colleagues together across our UK-wide estate, while also supporting generous access to remote work. We value the time spent in the office for problem-solving, learning, and connection.

For this position, you will be located at our nearest regional office or hub. Regular collaboration with colleagues is required, and depending on your location, you may be expected to spend at least two days a week, or 40% of your time if part-time, in the office. Your hiring manager will provide specific details on arrangements upon a successful application.

Application Notes

Nationwide is committed to the redeployment of employees impacted by changes; therefore, applications from redeployment candidates will be prioritized in this recruitment process.

If you are a colleague who is on long-term absence (such as parental leave) or a temporary worker, please submit your application using your personal email address.