Senior Security Engineer, Incident Response Team

Accountabilities:

• Lead and coordinate end-to-end response to high-severity security incidents across cloud and corporate environments.
• Cover the APAC operating window within a global 24/7 follow-the-sun model and participate in a rotating on-call schedule.
• Prepare clear, concise executive communications that keep stakeholders informed throughout significant security incidents.
• Conduct complex security investigations using strong Digital Forensics and Incident Response (DFIR) methodologies.
• Partner with Detection Engineering to develop and improve SIEM use cases, alerting strategies, detection capabilities, and telemetry pipelines.
• Build and enhance automation and AI-assisted workflows to improve incident triage, investigation efficiency, response consistency, and detection fidelity.
• Collaborate with Threat Intelligence teams to contextualize emerging threats, understand adversary behavior, and strengthen detection coverage.
• Conduct root cause analysis and lead post-incident reviews, translating findings into measurable improvements in security controls and processes.
• Develop and maintain incident response runbooks, playbooks, procedures, and operational documentation.
• Collaborate with Engineering, Infrastructure, Legal, Product, Communications, and other teams during incidents and proactive security initiatives such as tabletop exercises.
• Mentor other security engineers and contribute to improving the team's overall incident response maturity and operational effectiveness.

Requirements:

• Strong professional experience in security incident response and investigations, particularly within cloud-first environments.
• Hands-on experience with Digital Forensics and Incident Response methodologies and the ability to operate effectively during high-severity security events.
• Experience using or administering Git or GitLab in a security or engineering environment.
• Practical experience with SIEM, EDR, detection engineering, or related security monitoring technologies.
• Experience working with major cloud platforms, particularly AWS and GCP.
• Familiarity with threat intelligence, adversary tactics, and frameworks such as MITRE ATT&CK.
• Experience developing or using automation through Python, scripting, SOAR platforms, or similar technologies.
• Interest or experience applying AI, machine learning, or data-driven techniques to detection, triage, investigation, or response workflows.
• Strong analytical and problem-solving abilities, with sound judgment and composure when handling critical incidents.
• Excellent written communication skills and a strong focus on producing clear, actionable technical documentation.
• Proactive mindset with a strong focus on identifying, mitigating, and learning from security risks.
• Ability to collaborate effectively across technical and business functions within a globally distributed environment.
• Willingness and availability to support the APAC window and participate in a rotating on-call schedule.

Benefits:

• Fully remote position based in Australia.
• Flexible Paid Time Off.
• Benefits designed to support health, finances, and overall well-being.
• Equity compensation and Employee Stock Purchase Plan.
• Growth and Development Fund to support ongoing professional learning.
• Parental leave.
• Team Member Resource Groups and an inclusive, collaborative working environment.
• Opportunity to work within a globally distributed security organization spanning AMER, APAC, and EMEA.
• Exposure to complex security incidents, cloud environments, threat intelligence, detection engineering, automation, and AI-assisted security workflows.
• Opportunity to influence security operations, incident response maturity, and scalable detection and response capabilities.
• Cross-regional collaboration supported by established processes, automation, and structured incident handovers.