Job Description

n

Senior Cyber Security Engineer, Detection & Response

n

Sydney, hybrid

n

You'll take technical ownership of detection and response for a well-known manufacturer operating across Asia-Pacific, during a major business and technology transformation. It's a senior individual contributor seat on a modern Microsoft security stack, setting the direction for detection engineering, incident response and the external SOC.

n

The essentials

n

n
- $160,000-$180,000 + super
n
- Sydney, hybrid: 3 days in the office, 2 from home
n

n

What you'll actually do

n

n
- Build, tune and extend detection use cases across EDR, SIEM, cloud, identity and network platforms, closing coverage gaps and onboarding current log sources
n
- Lead technical investigations and response for cyber incidents, from containment through to recovery, post-incident reviews and executive reporting
n
- Run proactive threat hunting and feed findings and threat intelligence back into detection logic
n
- Act as the Detection & Response subject matter expert on projects, including the SAP programme, defining logging, monitoring and response requirements for new platforms
n
- Lead the operational relationship with the external SOC and managed security providers, reviewing performance and validating their investigations
n
- Keep runbooks,



playbooks and procedures current and support audit and governance work
n

n

What you'll need

n

n
- 10+ years in security operations, detection engineering, incident response or cyber defence
n
- A track record of leading cyber investigations and incident response
n
- Strong hands‑on EDR and SIEM experience, ideally Microsoft Defender for Endpoint and Microsoft Sentinel
n
- Solid understanding of attacker techniques, MITRE ATT&CK;, malware behaviour and security telemetry, with working knowledge of Windows, Linux and network security
n
- Experience working with managed security providers and SOC environments
n
- The ability to explain technical issues in business language and stay calm and effective during major incidents
n

n

Nice to have

n

n
- Azure and Microsoft 365 security monitoring
n
- Exposure to Operational Technology (OT) environments
n
- Scripting in KQL, PowerShell or Python
n
- SOAR and security automation experience
n

n

What's in it for you

n

n
- Senior ownership of detection and response through a significant transformation programme
n
- A modern Microsoft security stack
n
- Hybrid working, with 2 days a week from home
n

n

#J-18808-Ljbffr

📌 Senior Cyber Detection Engineer (New South Wales)
🏢 LT Harper Group
📍 New South Wales