Summary
✨ AI‑Generated
Join a high-impact security team protecting financial systems, customer data, and corporate environments. You will build and tune detections, investigate and contain incidents, hunt for threats, improve cloud visibility, and create automation and response playbooks.
Highlights
Permanent full-time role with substantial ownership in a small security team, direct exposure to senior security leadership, and hands-on responsibility for detection, incident response, threat hunting, and automation.
Description
Senior Cyber Security Engineer (Detection, Response and Identity)
Permanent, full time
Melbourne CBD
$165,000 - $180,000 (DOE)
About the opportunity:
Join a fast growing global FinTech business operating under multiple international regulators, where security is taken seriously at the very top.
Reporting directly to the CISO, you'll be a hands on engineer in a small, high impact security team, defending financial platforms, client data and corporate systems in a genuinely hostile threat environment.
This is a role for someone who chases down the odd log entry, assumes attackers are already trying the door, and wants real ownership rather than a seat in a large SOC.
What you'll be doing:
Building and tuning detections, investigating alerts and leading incidents through containment, recovery and lessons learnedHunting for threats proactively and improving visibility across cloud, corporate and trading environmentsCreating response playbooks and automation to cut noise and speed up investigationsWorking alongside an external security provider to make sure every event is properly run to groundStrengthening identity security across Entra ID and Azure, including MFA, SSO, conditional access, privileged access and access reviewsSecuring Google Workspace, endpoints, managed devices, SaaS apps and the corporate networkWriting security tooling and automation, managed through Git, peer review and pipelinesPartnering with engineering and cloud teams on secure design, vulnerability remediation and posture improvementsRolling up your sleeves on governance and audit work, including ISO 27001 aligned controls and evidence
What we need to see:
Senior experience in a cyber security engineering, security operations or cloud security roleReal incident response experience, with examples of investigations you have personally drivenHands on detection engineering and alert tuning across SIEM, XDR and SOAR platformsStrong Entra ID and Azure identity experience: MFA, SSO, RBAC, PAM, access reviews and lifecycle controlsExperience securing Google Workspace, endpoints, device management and corporate networksScripting and automation skills (Python, PowerShell or similar)Comfort working with Git, pull requests and CI/CD pipelinesA curious, proactive mindset and the confidence to operate autonomously in a small teamWillingness to contribute across operations, identity, cloud and governance work
Bonus points:
Microsoft Sentinel, KQL and Microsoft DefenderAWS security experience (CloudTrail, GuardDuty, IAM)A background in trading, fintech, crypto, wagering or other regulated financial servicesExperience supporting ISO 27001 or similar auditsRelevant certifications such as SC 200, SC 300, AZ 500, GCIH or OSCPEvidence you stay sharp outside work: home labs, CTFs, research or bug bounties
