Senior Security Engineer, Incident Response Team (Australia)

Responsibilities

• Lead and coordinate end-to-end incident response for high-severity security events. SIRT operates a 24/7 follow the sun model across AMER, APAC and EMEA. This role covers the APAC window and participates in a rotating on-call schedule.
• Prepare clear executive communications that keep stakeholders informed during incidents
• Investigate complex security incidents across cloud environments, applying strong Digital Forensics and Incident Response (DFIR) methodologies
• Partner with Detection Engineering to design and implement detection capabilities, including SIEM use cases, alerting strategies, and telemetry pipelines
• Build and enhance automation and AI-assisted workflows to improve triage, investigation speed, and response consistency
• Partner with Threat Intelligence to contextualize threats and improve detection coverage
• Conduct root cause analysis (RCA) and lead post-incident reviews to drive continuous improvement and risk reduction
• Develop and maintain runbooks, playbooks, and operational documentation
• Collaborate cross-functionally (Engineering, Infrastructure, Legal, Product, Communications, etc) during incidents and lead proactive initiatives (e.g. tabletops)
• Mentor other engineers and help elevate the team’s overall incident response maturity

Languages