Associate Security Engineer — Hybrid Threat Detection

Apply; City of Melbourne; Hybrid; AUD 110,000 - 140,000; Full time

Job summary

Xero in Melbourne is seeking an Associate Security Engineer to help design, build and continuously improve capabilities for detecting, investigating and responding to security threats. You’ll work with Security Operations, Security Response, Engineering, Product, CX and Legal to translate threat intelligence into practical controls that keep Xero and customers safe.

You’ll develop engineering capability through delivery, pairing, incident participation, and learning from more experienced

Qualifications

• Growth mindset and curiosity in security engineering and related disciplines.
• Comfortable learning an unfamiliar codebase or platform with guidance.
• Clear written and verbal communication; collaborative and team-oriented.
• Hands-on scripting, debugging, automation, or small integrations.
• Experience in engineering, security, IT, operations or technology teams.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents with guidance.
• Contribute to detection, monitoring, enrichment and response workflows across security platforms.
• Build and improve detection content, integrations, dashboards and alerts.
• Develop runbooks, playbooks and automations to reduce manual effort.
• Expand threat-intelligence-led detection engineering and automation coverage.

Skills

Growth mindset

Security engineering

Collaboration

Scripting

Automation

AI-assisted tools

Tools

SIEM

SOAR

EDR

Cloud security tooling

Job description

Xero in Melbourne is seeking an Associate Security Engineer to help design, build and continuously improve capabilities for detecting, investigating and responding to security threats. You’ll work with Security Operations, Security Response, Engineering, Product, CX and Legal to translate threat intelligence into practical controls that keep Xero and customers safe.

You’ll develop engineering capability through delivery, pairing, incident participation, and learning from more experienced