Detection & Incident Response Engineer - Hybrid

xceltium

Sydney

Hybrid

AUD 139,000 - 169,000

Full time

11 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

xceltium is seeking a Cyber Security Engineer – Detection & Incident Response to enhance detection coverage and incident response readiness within a national not-for-profit healthcare environment. The role blends detection engineering with practical incident response ownership, reporting to cyber defence leadership.

You will work across CrowdStrike, Mimecast, Airlock and other security tools, with a focus on actionable improvements and sustainable practices.

Qualifications

  • Experience investigating security alerts and analysing logs.
  • Exposure to SIEM, EDR/XDR or similar monitoring technologies.
  • Understanding of detection rules, alert tuning and threat intel.

Responsibilities

  • Assess monitoring coverage and alert quality to identify improvement priorities.
  • Develop and tune detection rules and investigation logic to improve visibility.
  • Investigate security alerts and support escalation of potential threats.
  • Incorporate threat intelligence into detection and investigations.
  • Improve incident-response playbooks and escalation paths.
  • Coordinate containment and remediation with technical teams.
  • Support phishing simulations and tabletop exercises.
  • Document improvements and transfer knowledge to the team.

Skills

Security monitoring
SIEM
EDR/XDR
Threat intelligence
Incident response
Collaboration
MITRE ATT&CK
Scripting (advantageous)

Tools

CrowdStrike
Microsoft Defender
Sentinel
KQL
Mimecast
Airlock

Job description

xceltium is seeking a Cyber Security Engineer – Detection & Incident Response to enhance detection coverage and incident response readiness within a national not-for-profit healthcare environment. The role blends detection engineering with practical incident response ownership, reporting to cyber defence leadership.

You will work across CrowdStrike, Mimecast, Airlock and other security tools, with a focus on actionable improvements and sustainable practices.

Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Senior Detection & Response Engineer (Remote)
Senior Detection & Response Engineer (Remote)

REA Group Melbourne, AUS • Melbourne

Hybrid
AUD 140,000 - 190,000
Hybrid work model
Birthday leave and flexible leave
Volunteer leave
+2
Hybrid Staff Security Engineer — Detection & Response
Hybrid Staff Security Engineer — Detection & Response

REA Group • Melbourne

Hybrid
AUD 150,000 - 210,000
Hybrid work
Flexible leave
Parental leave
+2
Cyber Security Engineer – Detection & Incident Response
Cyber Security Engineer – Detection & Incident Response

xceltium • Sydney

Hybrid
AUD 139,000 - 169,000
Cyber Defense & Incident Response Specialist
Cyber Defense & Incident Response Specialist

Monadelphous • Western Australia

On-site
AUD 90,000 - 130,000
Growth opportunities
Supportive team
Work-life balance
Security Detection & Response Engineer
Security Detection & Response Engineer

DroneShield • Sydney

On-site
AUD 120,000 - 180,000
Senior SOC Analyst: Lead Incidents & Detection (Hybrid)
Senior SOC Analyst: Lead Incidents & Detection (Hybrid)

Eagna Consulting • Gold Coast City

Hybrid
AUD 110,000 - 150,000
Night shift allowance
Laptop provided
Hybrid working
Senior Security Engineer - Remote/Hybrid, Cloud & Threat Defense
Senior Security Engineer - Remote/Hybrid, Cloud & Threat Defense

Airlock Digital • Sydney

Hybrid
AUD 120,000 - 180,000
Flexible Work Environment
Hybrid or Remote
Time Off
+4
Remote Detection & SOAR Engineer
Remote Detection & SOAR Engineer

Google LLC • Australian Capital Territory

Hybrid
AUD 120,000 - 180,000
Security Operations Analyst – Threat Detection & Response
Security Operations Analyst – Threat Detection & Response

CyberCX • Brisbane

On-site
AUD 90,000 - 130,000
18 weeks paid parental leave
Career development program
Flexible work arrangements
+2
Cyber Defence Tech Lead: Detection, Automation & Intel
Cyber Defence Tech Lead: Detection, Automation & Intel

Head Office - Sydney • Sydney

On-site
AUD 180,000 - 280,000
Competitive remuneration
Professional development opportunities
Employee benefits and Ramsay Rewards
Top locations