Senior Security Engineer, Incident Response Team

Accountabilities:

- Lead and coordinate end-to-end response to high-severity security incidents across cloud and corporate environments.

- Cover the APAC operating window within a global 24/7 follow-the-sun model and participate in a rotating on-call schedule.

- Prepare clear, concise executive communications that keep stakeholders informed throughout significant security incidents.

- Conduct complex security investigations using strong Digital Forensics and Incident Response (DFIR) methodologies.

- Partner with Detection Engineering to develop and improve SIEM use cases, alerting strategies, detection capabilities, and telemetry pipelines.

- Build and enhance automation and AI-assisted workflows to improve incident triage, investigation efficiency, response consistency, and detection fidelity.

- Collaborate with Threat Intelligence teams to contextualize emerging threats, understand adversary behavior, and strengthen detection coverage.

- Conduct root cause analysis and lead post-incident reviews, translating findings into measurable improvements in security controls and processes.

- Develop and maintain incident response runbooks, playbooks, procedures, and operational documentation.

- Collaborate with Engineering, Infrastructure, Legal, Product, Communications, and other teams during incidents and proactive security initiatives such as tabletop exercises.

- Mentor other security engineers and contribute to improving the team's overall incident response maturity and operational effectiveness.

Requirements:

- Strong professional experience in security incident response and investigations, particularly within cloud-first environments.

- Hands-on experience with Digital Forensics and Incident Response methodologies and the ability to operate effectively during high-severity security events.

- Experience using or administering Git or GitLab in a security or engineering environment.

- Practical experience with SIEM, EDR, detection engineering, or related security monitoring technologies.

- Experience working with major cloud platforms, particularly AWS and GCP.

- Familiarity with threat intelligence, adversary tactics, and frameworks such as MITRE ATT&CK.

- Experience developing or using automation through Python, scripting, SOAR platforms, or similar technologies.

- Interest or experience applying AI, machine learning, or data-driven techniques to detection, triage, investigation, or response workflows.

- Strong analytical and problem-solving abilities, with sound judgment and composure when handling critical incidents.

- Excellent written communication skills and a strong focus on producing clear, actionable technical documentation.

- Proactive mindset with a strong focus on identifying, mitigating, and learning from security risks.

- Ability to collaborate effectively across technical and business functions within a globally distributed environment.

- Willingness and availability to support the APAC window and participate in a rotating on-call schedule.

Benefits:

- Fully remote position based in Australia.

- Flexible Paid Time Off.

- Benefits designed to support health, finances, and overall well-being.

- Equity compensation and Employee Stock Purchase Plan.

- Growth and Development Fund to support ongoing professional learning.

- Parental leave.

- Team Member Resource Groups and an inclusive, collaborative working environment.

- Opportunity to work within a globally distributed security organization spanning AMER, APAC, and EMEA.

- Exposure to complex security incidents, cloud environments, threat intelligence, detection engineering, automation, and AI-assisted security workflows.

- Opportunity to influence security operations, incident response maturity, and scalable detection and response capabilities.

- Cross-regional collaboration supported by established processes, automation, and structured incident handovers.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether? 
 
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
 
 
#LI-CL1