Security Detection & Response Engineer

DroneShield; Sydney; On-site; AUD 120,000 - 160,000; Full time

Job summary

DroneShield is seeking a Detection and Response Engineer to join the Security team in Sydney, NSW. You will own and evolve our detection strategy, integrating tooling, threat intel, and incident response practices to protect our hardware and software assets.

The role requires hands-on security operations, incident triage, and collaboration with engineering and IT. You will develop automation, runbooks, and metrics to improve detection coverage and response speed in a fast-paced, high-stakes

Qualifications

• 3-6 years of experience in security operations, incident response, or detection engineering.
• Hands-on experience investigating security incidents in cloud or enterprise environments.
• Familiarity with SIEM platforms and log analysis.
• Basic scripting or programming experience (Python, Bash, KQL, Go or Powershell)

Responsibilities

• Develop, tune, and maintain detection rules across SIEM and security tooling.
• Improve signal-to-noise ratio by reducing false positives and enhancing alert fidelity.
• Investigate and respond to security incidents across endpoints, cloud, and SaaS environments.
• Support incident handling from detection through containment, eradication, and recovery.
• Conduct post-incident reviews (RCA) and contribute to lessons learned.
• Identify gaps in detection and response capabilities and propose improvements.

Skills

Security operations

Incident response

Detection engineering

Python

Linux

Cloud platforms

Tools

SIEM platforms

Cloud tooling

Job description

DroneShield is seeking a Detection and Response Engineer to join the Security team in Sydney, NSW. You will own and evolve our detection strategy, integrating tooling, threat intel, and incident response practices to protect our hardware and software assets.

The role requires hands-on security operations, incident triage, and collaboration with engineering and IT. You will develop automation, runbooks, and metrics to improve detection coverage and response speed in a fast-paced, high-stakes