Security Detection & Response II

Adecco; Sydney; On-site; AUD 110,000 - 150,000; Full time

Job summary

Adecco is recruiting for a Security Detection & Response Analyst (SDR II) to join a high-performing Monitoring & Triage team in Sydney. You will work across the full detection and response lifecycle, investigating incidents, building detection content, and maturing automation and SOAR capabilities.

You will lead investigations across endpoints, cloud, and identities, tune rules, and collaborate with stakeholders to strengthen monitoring coverage.

Qualifications

• Experience in Security Operations, Incident Response or cyber security operations.
• Ability to independently assess, prioritise and respond to threats across environments.
• Hands-on experience with SIEM, EDR/XDR, cloud security and identity security technologies.
• Strong log analysis and investigative skills using query languages (KQL/SPL/SQL).
• Experience developing or maintaining detection content, automation, or SOAR workflows.
• Knowledge of attacker TTPs and MITRE ATT&CK framework.

Responsibilities

• Lead and manage security investigations across endpoint, identity, network, cloud and application environments.
• Analyse logs, telemetry and threat intelligence to identify and respond to incidents.
• Build, tune and optimise detection rules to improve visibility and reduce false positives.
• Coordinate incident response activities including containment and remediation.
• Develop automation, orchestration, and SOAR workflows to improve efficiency.
• Collaborate with stakeholders to strengthen monitoring and detection effectiveness.
• Contribute to playbooks, runbooks and response procedures for ongoing improvement.
• Identify gaps in controls and monitoring, driving improvement initiatives.
• Support integration of new use cases and detection capabilities into SOC.
• Mentor junior analysts and promote knowledge sharing within the team.

Skills

Security Operations

Incident Response

Detection Engineering

Log Analysis

Automation

SOAR

MITRE ATT&CK

KQL

SPL

SQL

Tools

SIEM

EDR/XDR

Cloud Security

Identity Security

Job description

We're partnering with a leading enterprise organisation seeking a Security Detection & Response Analyst (SDR II) to join a high-performing Monitoring & Triage team responsible for protecting critical technology environments from evolving cyber threats.

This is an opportunity to work across the full detection and response lifecycle, combining investigation, incident response, detection engineering, automation, and continuous improvement initiatives. You'll play a key role in strengthening security operations while working with modern security technologies and experienced cyber professionals.

About Us

Our client operates a mature and forward-thinking cyber security function focused on protecting enterprise systems, data, and users across a complex technology landscape.

With significant investment in cyber security capabilities, the organisation offers exposure to leading SIEM, EDR/XDR, SOAR, cloud security, and AI-enabled technologies. You'll join a collaborative team that values innovation, continuous improvement, and professional development while tackling complex and meaningful security challenges.

Responsibilities

As a Security Detection & Response Analyst, you will:

• Lead and manage security investigations across endpoint, identity, network, cloud, and application environments.
• Analyse logs, telemetry, and threat intelligence to identify, investigate, and respond to security incidents.
• Build, validate, tune, and optimise detection rules to improve security visibility and reduce false positives.
• Coordinate incident response activities including containment, remediation, escalation, and recovery support.
• Develop and enhance automation, orchestration, and SOAR workflows to improve operational efficiency.
• Work closely with cyber security stakeholders to strengthen monitoring coverage and detection effectiveness.
• Contribute to the ongoing improvement of investigation playbooks, runbooks, and response procedures.
• Identify gaps in security controls, monitoring capabilities, and operational processes, driving continuous improvement initiatives.
• Support the integration of new use cases, technologies, and detection capabilities into the security operations environment.
• Mentor and provide guidance to junior analysts while promoting knowledge sharing across the team.

Your Profile

To be successful in this role, you'll bring:

• Demonstrated experience within Security Operations, Incident Response, Detection Engineering, or Cyber Security Operations environments.
• Strong experience conducting end-to-end security investigations with the ability to independently assess, prioritise, and respond to threats.
• Hands-on experience with SIEM, EDR/XDR, cloud security, and identity security technologies.
• Strong log analysis and investigative skills, including experience using KQL, SPL, SQL, or similar query languages.
• Experience developing or maintaining detection content, response workflows, automation, or SOAR capabilities.
• Knowledge of attacker tactics, techniques, and procedures (TTPs), including frameworks such as MITRE ATT&CK.
• Excellent analytical and problem-solving abilities with a proactive approach to threat identification and response.
• Strong communication skills with the ability to provide clear updates to both technical and non-technical stakeholders.
• The ability to operate independently, make risk-based decisions, and perform effectively in fast-paced environments.
• Relevant industry certifications such as SC-200, Security+, GSEC, GCIA, CySA+, CISSP, or similar will be highly regarded.

If you're looking for a role where you can expand your technical expertise, contribute to meaningful cyber security outcomes, and work with a team committed to innovation and continuous improvement, we'd love to hear from you.

This is an excellent opportunity to further develop your career within a mature security operations environment while gaining exposure to advanced detection, response, automation, and cloud security initiatives.