Senior Security Engineer, SIRT – AI-Driven IR (APAC)

Triwill Group; Australia; Remote; AUD 150,000 - 190,000; Full time

Benefits offered by this job

Flexible Paid Time Off

Equity Compensation & ESPP

Growth and Development Fund

Parental Leave

Job summary

GitLab is seeking a Senior Security Engineer to lead the Security Incident Response Team (SIRT) on a 24/7 follow-the-sun model, covering APAC/AMER/EMEA and owning incidents end-to-end from detection to recovery. You will partner with Detection Engineering, Threat Intelligence, and other teams to enhance automation, triage, and response effectiveness.

The role emphasizes DFIR expertise, cloud-first security, and building scalable detection and response systems.

Qualifications

• Strong experience in security incident response and investigations in cloud-first environments.
• Experience using or administering Git/GitLab in a security or engineering context.
• Hands-on experience with SIEM, EDR, and/or detection engineering.

Responsibilities

• Lead and coordinate end-to-end incident response for high-severity security events.
• Prepare clear executive communications during incidents.
• Investigate complex security incidents across cloud environments using DFIR methodologies.
• Partner with Detection Engineering to design detection capabilities and telemetry pipelines.
• Build automation and AI-assisted workflows to improve triage and response speed.
• Collaborate with Threat Intelligence to contextualize threats and improve coverage.
• Lead post-incident RCA and runbooks documentation.
• Mentor engineers and elevate incident response maturity.

Skills

Security incident response

Git/GitLab security

SIEM/EDR

Cloud AWS/GCP

Threat intelligence

Automation Python/SOAR

AI in security

Written communication

Analytical skills

MITRE ATT&CK

Tools

SIEM tools

EDR tools

SOAR platforms

GitLab

Job description

GitLab is seeking a Senior Security Engineer to lead the Security Incident Response Team (SIRT) on a 24/7 follow-the-sun model, covering APAC/AMER/EMEA and owning incidents end-to-end from detection to recovery. You will partner with Detection Engineering, Threat Intelligence, and other teams to enhance automation, triage, and response effectiveness.

The role emphasizes DFIR expertise, cloud-first security, and building scalable detection and response systems.