Senior Detection & Response Engineer – Remote

News Corp; Melbourne; Hybrid; AUD 120,000 - 190,000; Full time

Benefits offered by this job

Hybrid and flexible working

Birthday leave

Parental leave

Volunteer leave

Job summary

REA Group in Melbourne/Sydney is seeking a Senior Security Engineer for Detection & Response to modernise our detection platform. You will enhance data flows, telemetry integrations and detection workflows, applying detection-as-code and AI-assisted tooling to improve coverage and alert quality.

You will work with a diverse team, coordinate containment and response, and contribute to playbooks and automation to strengthen REA’s security posture across cloud and on-premises environments.

Qualifications

• Hands-on experience configuring and operating data flows, including log forwarding, data transformation, API integrations, cost-optimised ingestion and observability pipeline tools, with the ability to work with Platform and Cloud teams when existing integrations need changes.
• Practical experience working in cloud environments (AWS, GCP or Azure), with an understanding of cloud and application architectures, logging, monitoring, native security controls and common failure modes, and how to translate these into detection and response requirements.
• Practical experience defining the threats and behaviours to detect, and reviewing, tuning and validating high-fidelity detections through established detection-engineering practices and repository workflows.
• Strong log analysis skills, with the ability to parse, correlate and investigate security events across diverse log sources, and a working knowledge of scripting to understand and work effectively with security automation and SOAR workflows.
• Experience with security observability tooling including EDR, SIEM, CNAPP, SOAR, and identity platforms, understanding their telemetry and how to leverage it for high-fidelity detections
• Solid understanding of attacker techniques and frameworks (e.g. MITRE ATT&CK) and how to translate threat intelligence into effective detections and coverage assessments
• Familiarity with modern DevOps practices including CI/CD pipelines and automated deployment for security tooling
• Ability to build automation workflows for security operations and document operational procedures through playbooks, runbooks and detection test cases

Responsibilities

• Configure and operate the data flows that support our detection platform, including log forwarding, transformation and cost optimisation, working with Platform and Cloud teams where changes to existing integrations are needed.
• Define the threats and behaviours to detect, then review, tune and validate the high-fidelity detections and correlation logic that identify malicious activity across our environment, delivering measurable improvements in detection coverage and alert quality.
• Develop and maintain automated detection testing and validation processes to identify configuration drift, regressions and coverage gaps.
• Analyse security events and logs to identify malicious activity, patterns and emerging attack techniques during investigations and proactive threat hunting.
• Assess relevant threat intelligence and emerging attack techniques in the context of REA’s environment, translating the findings into improved detection coverage and signal quality.
• Investigate security alerts and incidents, independently determine whether containment is required, coordinate technical response activities, and communicate findings, actions and risks to the wider incident response team and business stakeholders as needed.
• Develop response playbooks and automation workflows to support rapid and effective incident containment and response.
• Partner with product, platform and engineering teams to ensure new systems and changes have appropriate logging, monitoring and detection coverage.
• Share knowledge with other Security and engineering teams, contributing to documentation, operational practices and continuous improvement.

Job description

REA Group in Melbourne/Sydney is seeking a Senior Security Engineer for Detection & Response to modernise our detection platform. You will enhance data flows, telemetry integrations and detection workflows, applying detection-as-code and AI-assisted tooling to improve coverage and alert quality.

You will work with a diverse team, coordinate containment and response, and contribute to playbooks and automation to strengthen REA’s security posture across cloud and on-premises environments.