Associate Security Engineer

Xero; City of Melbourne; On-site; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Xero in Melbourne is seeking an Associate Security Engineer to help design, build and improve capabilities to detect, investigate and respond to security threats. You will work with Security Defence across SIEM, SOAR, EDR and cloud security, turning threat intelligence into practical controls while growing your engineering capabilities through pairing and incident participation.

This hybrid role based in Melbourne offers collaboration with global teams and opportunities to automate detections

Qualifications

• Growth mindset and curiosity in security engineering or related discipline.
• Ability to learn unfamiliar codebases and apply patterns with guidance.
• Turn threat intelligence into practical, measurable detections and controls.
• Strong written and verbal communication with the team.
• Collaborative, enjoys pairing and helping others grow.
• Hands-on scripting and automation experience; building small integrations.
• Experience in engineering, security, IT, or operations teams.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Contribute to detection, monitoring, enrichment, and response workflows across SIEM, SOAR, EDR, cloud security.
• Build and improve detection content, integrations, dashboards and alerting.
• Develop runbooks, playbooks, and automations to reduce manual effort.
• Expand threat-intelligence-led detection engineering and automation coverage.

Skills

Security engineering

Cyber security

Software engineering

Cloud security

Detection engineering

Automation scripting

Collaboration

Tools

SIEM

SOAR

EDR

Job description

The role and its impact

As an Associate Security Engineer in our Security Defence team, you'll help design, build and continuously improve the capabilities we rely on to detect, investigate and respond to security threats. You'll work alongside Security Operations, Security Response, Engineering, Product, CX and Legal, turning threat intelligence and security requirements into practical, reliable controls that keep Xero and our customers safe.

You’ll develop your engineering capability through delivery, pairing, incident participation, and learning from more experienced engineers while contributing to the protection of Xero and our customers.

The team and how they connect

Security Defence sits at the heart of how Xero detects and responds to threats, working across SIEM, SOAR, EDR and cloud security tooling to keep our platform and customers protected. The team works closely with Security Operations, Security Response, Engineering and Product to turn insight into action, and prides itself on a high-trust, blameless, learning-oriented culture where questions and curiosity are always welcome.

The team is currently working on / Initially, you will focus on

• Monitoring, investigating, and responding to security alerts and suspected incidents with guidance from experienced engineers and analysts.

• Contribute to detection, monitoring, enrichment, and response workflows across security platforms such as SIEM, SOAR, EDR, cloud security, and related services.

• Building and improving detection content, integrations, dashboards and alerting across our security platforms

• Developing runbooks, playbooks and automations that reduce manual effort and speed up response

• Expanding threat-intelligence-led detection engineering and automation coverage across Xero

Where and how you can work

This role is based in our Melbourne office, offering a hybrid working model that balances local team presence with a global scope of work. You will have the flexibility to work from home while connecting with your colleagues in our modern office space during designated boost days.

Here are some of the things we're looking for

• A growth mindset and real curiosity in security engineering, cyber security, software engineering, cloud security, detection engineering, or a closely related discipline.

• Comfortable picking up an unfamiliar codebase or platform and applying established patterns with guidance.

• You Go Bold by turning threat intelligence and security research into practical, measurable detections and controls.

• Clear written and verbal communication, including sharing progress, blockers and context openly with your team.

• A collaborative approach, you enjoy pairing and feedback, and Go Together by lifting the people around you.

• Hands-on experience scripting, debugging, automating or building small integrations, along with an interest in using AI-assisted tools responsibly.

• Experience working in an engineering, security, IT, operations, or technology team and collaborating with others to deliver change.

Apply even if your experience isn't a perfect match! At Xero, we hire based on your skills, passion, and the unique perspective you can bring to enhance our culture and team.