Senior Cyber Security Engineer, Detection & Response
Sydney, hybrid
You'll take technical ownership of detection and response for a well-known manufacturer operating across Asia-Pacific, during a major business and technology transformation.
It's a senior individual contributor seat on a modern Microsoft security stack, setting the direction for detection engineering, incident response and the external SOC.
The essentials
$160,000-$180,000 + superSydney, hybrid: 3 days in the office, 2 from home
What you'll actually do
Build, tune and extend detection use cases across EDR, SIEM, cloud, identity and network platforms, closing coverage gaps and onboarding new log sourcesLead technical investigations and response for cyber incidents, from containment through to recovery, post-incident reviews and executive reportingRun proactive threat hunting and feed findings and threat intelligence back into detection logicAct as the Detection & Response subject matter expert on projects, including the SAP programme, defining logging, monitoring and response requirements for current platformsLead the operational relationship with the external SOC and managed security providers, reviewing performance and validating their investigationsKeep runbooks,



playbooks and procedures current and support audit and governance work
What you'll need
10+ years in security operations, detection engineering, incident response or cyber defenceA track record of leading cyber investigations and incident responseStrong hands‐on EDR and SIEM experience, ideally Microsoft Defender for Endpoint and Microsoft SentinelSolid understanding of attacker techniques, MITRE ATT&CK;, malware behaviour and security telemetry, with working knowledge of Windows, Linux and network securityExperience working with managed security providers and SOC environmentsThe ability to explain technical issues in business language and stay calm and effective during major incidents
Nice to have
Azure and Microsoft 365 security monitoringExposure to Operational Technology (OT) environmentsScripting in KQL, PowerShell or PythonSOAR and security automation experience
What's in it for you
Senior ownership of detection and response through a significant transformation programmeA modern Microsoft security stackHybrid working, with 2 days a week from home
#J-*****-Ljbffr

📌 Senior Cyber Detection Engineer (Sydney)
🏢 LT Harper Group
📍 Sydney