3 дня назад
Senior Security Engineer (Detection Engineer)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Senior Security Engineer (Detection Engineer) (Cybersecurity): Modernising detection and response capabilities through security data flows, telemetry integrations, high-fidelity detections, and response automation with an accent on cloud security, detection-as-code, and threat-informed coverage. Focus on analysing security events, validating detection logic, building automated testing and playbooks, and coordinating technical containment across complex environments.
Location: Permanent role based in Melbourne or Sydney, with remote work available from other Australian locations
Company
is a property technology company helping people find and finance homes through digital property services.
What you will do
- Configure and operate security data flows, including log forwarding, transformation, API integrations, and cost-optimised ingestion.
- Define threats and behaviours to detect, then review, tune, and validate high-fidelity detections and correlation logic.
- Develop automated detection testing and validation to identify configuration drift, regressions, and coverage gaps.
- Analyse security events, investigate alerts, conduct threat hunting, and translate threat intelligence into improved detection coverage.
- Coordinate technical containment and incident response, communicating findings, risks, and actions to stakeholders.
- Build response playbooks and automation workflows while partnering with product, platform, cloud, and engineering teams.
Requirements
- Hands-on experience with log forwarding, data transformation, API integrations, observability pipelines, and cost-optimised ingestion.
- Practical experience with AWS, GCP, or Azure, including cloud architecture, logging, monitoring, and native security controls.
- Experience defining, tuning, reviewing, and validating high-fidelity detections using detection-engineering and repository workflows.
- Strong log analysis, event correlation, scripting, and security automation skills.
- Experience with EDR, SIEM, CNAPP, SOAR, and identity platforms.
- Understanding of attacker techniques, MITRE ATT&CK, CI/CD, automated deployment, playbooks, runbooks, and detection test cases.
Culture & Benefits
- Hybrid and flexible working approach.
- Flexible leave, including birthday leave and the option to purchase additional leave.
- Flexible parental leave for primary and secondary carers.
- Volunteering leave, community grants, matched payroll giving, and charity-focused community programs.
- Hackdays for developing and testing new ideas.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →