# Intermediate Security Engineer, Security Incident Response Team (SIRT)Remote, Australia
· REMOTEPro Hacker+ signal## GitLabRemote incident responder in Australia covering GitLab's 24/7 SIRT on a compressed four-day schedule.
Type: FULLTIMEMode: REMOTEMinimum rank: Pro Hacker##

About the role
The engineer leads incidents through detection, containment and recovery, maintains runbooks and runs root cause and lessons-learned reviews. The role also automates security processes and closes detection gaps. It follows a compressed Sunday–Wednesday schedule for 24/7/365 coverage.### What you will do
* Lead incident response from detection to recovery
* Maintain incident response documentation and runbooks




* Run root cause and lessons-learned reviews
* Automate security processes
* Identify gaps and improve detections### What they ask for
* Demonstrated ability to handle incidents independently
* Experience with SIEM and security logging
* GCP and/or AWS experience
* Python skills or willingness to learn
* Interest in technical documentation
* Remote within Australia
* Compressed Sunday–Wednesday shift schedule### Nice to have
* Forensic analysis of compromised hosts
* Cloud-based security investigations

📌 Intermediate Security Engineer, Security Incident Response Team (Australia)
🏢 Rootedsec
📍 Australia