Senior Cyber Security Engineer, Detection & Response

Sydney, hybrid

You'll take technical ownership of detection and response for a well-known manufacturer operating across Asia-Pacific, during a major business and technology transformation. It's a senior individual contributor seat on a modern Microsoft security stack, setting the direction for detection engineering, incident response and the external SOC.

The essentials

- $160,000-$180,000 + super
- Sydney, hybrid: 3 days in the office, 2 from home

What you'll actually do

- Build, tune and extend detection use cases across EDR, SIEM, cloud, identity and network platforms, closing coverage gaps and onboarding new log sources
- Lead technical investigations and response for cyber incidents, from containment through to recovery, post-incident reviews and executive reporting
- Run proactive threat hunting and feed findings and threat intelligence back into detection logic
- Act as the Detection & Response subject matter expert on projects, including the SAP programme, defining logging, monitoring and response requirements for new platforms
- Lead the operational relationship with the external SOC and managed security providers, reviewing performance and validating their investigations
- Keep runbooks, playbooks and procedures current and support audit and governance work

What you'll need

Essential





- 10+ years in security operations, detection engineering, incident response or cyber defence
- A track record of leading cyber investigations and incident response
- Solid hands-on EDR and SIEM experience, ideally Microsoft Defender for Endpoint and Microsoft Sentinel
- Solid understanding of attacker techniques, MITRE ATT&CK;, malware behaviour and security telemetry, with working knowledge of Windows, Linux and network security
- Experience working with managed security providers and SOC environments
- The ability to explain technical issues in business language and stay calm and effective during major incidents

Nice to have
- Azure and Microsoft 365 security monitoring
- Exposure to Operational Technology (OT) environments
- Scripting in KQL, PowerShell or Python
- SOAR and security automation experience

What's in it for you

- Senior ownership of detection and response through a significant transformation programme
- A modern Microsoft security stack
- Hybrid working, with 2 days a week from home

Apply LT Harper is handling this search on our client's behalf. If you're interested, apply directly on this advert. If you have any questions, or would like to refer someone, reach out to Jack Lamport at [email protected].

📌 Senior Cyber Detection Engineer (Sydney)
🏢 LT Harper - Cyber Security Recruitment
📍 Sydney