# Intermediate Security Engineer, Security Incident Response Team (SIRT)Remote, Australia· REMOTEPro Hacker+ signal## GitLabRemote incident responder in Australia covering GitLab's 24/7 SIRT on a compressed four-day schedule.Type: FULLTIMEMode: REMOTEMinimum rank: Pro Hacker## About the roleThe engineer leads incidents through detection, containment and recovery, maintains runbooks and runs root cause and lessons-learned reviews. The role also automates security processes and closes detection gaps. It follows a compressed Sunday–Wednesday schedule for 24/7/365 coverage.### What you will do* Lead incident response from detection to recovery* Maintain incident response documentation and runbooks* Run root cause and lessons-learned reviews* Automate security processes* Identify gaps and improve detections### What they ask for* Demonstrated ability to handle incidents independently* Experience with SIEM and security logging* GCP and/or AWS experience* Python skills or willingness to learn* Interest in technical documentation* Remote within Australia* Compressed Sunday–Wednesday shift schedule### Nice to have* Forensic analysis of compromised hosts* Cloud-based security investigations
#J-18808-Ljbffr

📌 Intermediate Security Engineer, Security Incident Response Team (SIRT) (Sydney)
🏢 Rootedsec
📍 Sydney