Senior Cyber Security Engineer, Detection & Response
Sydney, hybrid
You'll take technical ownership of detection and response for a well-known manufacturer operating across Asia-Pacific, during a major business and technology transformation. It's a senior individual contributor seat on a modern Microsoft security stack, setting the direction for detection engineering, incident response and the external SOC.
The essentials
$160,000-$180,000 + super
Sydney, hybrid: 3 days in the office, 2 from home
What you'll actually do
Build, tune and extend detection use cases across EDR, SIEM, cloud, identity and network platforms, closing coverage gaps and onboarding new log sources
Lead technical investigations and response for cyber incidents, from containment through to recovery, post-incident reviews and executive reporting
Run proactive threat hunting and feed findings and threat intelligence back into detection logic
Act as the Detection & Response subject matter expert on projects, including the SAP programme, defining logging, monitoring and response requirements for new platforms
Lead the operational relationship with the external SOC and managed security providers, reviewing performance and validating their investigations
Keep runbooks,



playbooks and procedures current and support audit and governance work
What you'll need
10+ years in security operations, detection engineering, incident response or cyber defence
A track record of leading cyber investigations and incident response
Solid hands‐on EDR and SIEM experience, ideally Microsoft Defender for Endpoint and Microsoft Sentinel
Solid understanding of attacker techniques, MITRE ATT&CK;, malware behaviour and security telemetry, with working knowledge of Windows, Linux and network security
Experience working with managed security providers and SOC environments
The ability to explain technical issues in business language and stay calm and effective during major incidents
Nice to have
Azure and Microsoft 365 security monitoring
Exposure to Operational Technology (OT) environments
Scripting in KQL, PowerShell or Python
SOAR and security automation experience
What's in it for you
Senior ownership of detection and response through a significant transformation programme
A modern Microsoft security stack
Hybrid working, with 2 days a week from home
#J-*****-Ljbffr

📌 Senior Cyber Detection Engineer (New South Wales)
🏢 LT Harper Group
📍 New South Wales