Threat Detection Engineer – Associate

Xero; City of Melbourne; Hybrid; AUD 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Xero in Melbourne is seeking an Associate Security Engineer to help design, build and improve capabilities to detect, investigate and respond to security threats. You will work with Security Defence across SIEM, SOAR, EDR and cloud security, turning threat intelligence into practical controls while growing your engineering capabilities through pairing and incident participation.

This hybrid role based in Melbourne offers collaboration with global teams and opportunities to automate detections

Qualifications

• Growth mindset and curiosity in security engineering or related discipline.
• Ability to learn unfamiliar codebases and apply patterns with guidance.
• Turn threat intelligence into practical, measurable detections and controls.
• Strong written and verbal communication with the team.
• Collaborative, enjoys pairing and helping others grow.
• Hands-on scripting and automation experience; building small integrations.
• Experience in engineering, security, IT, or operations teams.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents.
• Contribute to detection, monitoring, enrichment, and response workflows across SIEM, SOAR, EDR, cloud security.
• Build and improve detection content, integrations, dashboards and alerting.
• Develop runbooks, playbooks, and automations to reduce manual effort.
• Expand threat-intelligence-led detection engineering and automation coverage.

Skills

Security engineering

Cyber security

Software engineering

Cloud security

Detection engineering

Automation scripting

Collaboration

Tools

SIEM

SOAR

EDR

Job description

Xero in Melbourne is seeking an Associate Security Engineer to help design, build and improve capabilities to detect, investigate and respond to security threats. You will work with Security Defence across SIEM, SOAR, EDR and cloud security, turning threat intelligence into practical controls while growing your engineering capabilities through pairing and incident participation.

This hybrid role based in Melbourne offers collaboration with global teams and opportunities to automate detections