Security Detection & Response II

Adecco Australia Group; Sydney; On-site; AUD 120,000 - 170,000; Full time

Job summary

Adecco Australia Group is partnering with a leading enterprise to recruit a Security Detection & Response Analyst (SDR II) to join a high-performing Monitoring & Triage team in Sydney. You will work across the full detection and response lifecycle, blending investigation, incident response, detection engineering, automation, and continuous improvement.

Our client focuses on protecting critical technology environments and offers exposure to SIEM, EDR/XDR, SOAR, cloud security, and AI-enabled

Qualifications

• Experience in Security Operations, Incident Response, or Cyber Security Operations.
• Proficient in end-to-end security investigations and threat response.
• Hands-on with SIEM/EDR/XDR, cloud and identity security technologies.

Responsibilities

• Lead and manage security investigations across endpoints, identity, network, cloud, and apps.
• Analyse logs and threat intel to identify, investigate, and respond to incidents.
• Tune detection rules to improve visibility and reduce false positives.
• Coordinate containment, remediation, escalation, and recovery activities.
• Develop automation and SOAR workflows to boost efficiency.
• Collaborate with stakeholders to strengthen monitoring and detection.
• Improve playbooks, runbooks, and response procedures.
• Identify gaps in controls and drive continuous improvement.
• Integrate new use cases and detection capabilities into SOC.
• Mentor junior analysts and promote knowledge sharing.

Skills

Security Operations

Incident Response

Detection Engineering

Log analysis

SOAR automation

Threat hunting

MITRE ATT&CK

Communication

Tools

SIEM

EDR/XDR

Cloud security tools

Identity security tools

Job description

We're partnering with a leading enterprise organisation seeking a Security Detection & Response Analyst (SDR II) to join a high-performing Monitoring & Triage team responsible for protecting critical technology environments from evolving cyber threats.

This is an opportunity to work across the full detection and response lifecycle, combining investigation, incident response, detection engineering, automation, and continuous improvement initiatives. You'll play a key role in strengthening security operations while working with modern security technologies and experienced cyber professionals.

About Us

Our client operates a mature and forward-thinking cyber security function focused on protecting enterprise systems, data, and users across a complex technology landscape.

With significant investment in cyber security capabilities, the organisation offers exposure to leading SIEM, EDR/XDR, SOAR, cloud security, and AI-enabled technologies. You'll join a collaborative team that values innovation, continuous improvement, and professional development while tackling complex and meaningful security challenges.

Responsibilities

As a Security Detection & Response Analyst, you will:

• Lead and manage security investigations across endpoint, identity, network, cloud, and application environments.
• Analyse logs, telemetry, and threat intelligence to identify, investigate, and respond to security incidents.
• Build, validate, tune, and optimise detection rules to improve security visibility and reduce false positives.
• Coordinate incident response activities including containment, remediation, escalation, and recovery support.
• Develop and enhance automation, orchestration, and SOAR workflows to improve operational efficiency.
• Work closely with cyber security stakeholders to strengthen monitoring coverage and detection effectiveness.
• Contribute to the ongoing improvement of investigation playbooks, runbooks, and response procedures.
• Identify gaps in security controls, monitoring capabilities, and operational processes, driving continuous improvement initiatives.
• Support the integration of new use cases, technologies, and detection capabilities into the security operations environment.
• Mentor and provide guidance to junior analysts while promoting knowledge sharing across the team.

Your Profile

To be successful in this role, you'll bring:

• Demonstrated experience within Security Operations, Incident Response, Detection Engineering, or Cyber Security Operations environments.
• Strong experience conducting end-to-end security investigations with the ability to independently assess, prioritise, and respond to threats.
• Hands-on experience with SIEM, EDR/XDR, cloud security, and identity security technologies.
• Strong log analysis and investigative skills, including experience using KQL, SPL, SQL, or similar query languages.
• Experience developing or maintaining detection content, response workflows, automation, or SOAR capabilities.
• Knowledge of attacker tactics, techniques, and procedures (TTPs), including frameworks such as MITRE ATT&CK.
• Excellent analytical and problem-solving abilities with a proactive approach to threat identification and response.
• Strong communication skills with the ability to provide clear updates to both technical and non-technical stakeholders.
• The ability to operate independently, make risk-based decisions, and perform effectively in fast-paced environments.
• Relevant industry certifications such as SC-200, Security+, GSEC, GCIA, CySA+, CISSP, or similar will be highly regarded.

If you're looking for a role where you can expand your technical expertise, contribute to meaningful cyber security outcomes, and work with a team committed to innovation and continuous improvement, we'd love to hear from you.

This is an excellent opportunity to further develop your career within a mature security operations environment while gaining exposure to advanced detection, response, automation, and cloud security initiatives.