Security Engineer
Financial services
We’re building a shortlist for upcoming client engagements in this area. If your background fits, we’d rather talk now than when the role lands.
Here's what you'll do day-to-day
This is a hands-on security engineering role inside an established internal team. You’ll spend most of your week in detection and response tooling, with the rest on hardening and uplift work alongside the platform and infrastructure teams.
- Build and tune detections in the SIEM, and cut down the noise in what's already there
- Investigate alerts end to end, and feed what you learn back into the rules
- Work with platform teams on logging coverage, so gaps get closed rather than documented
- Contribute to hardening standards across cloud and on-premise environments
The team is small enough that you’ll own things outright rather than raising tickets for someone else to action. Expect to be across several areas rather than specialised into one.
Requirements
We care more about how you think than which products you’ve used. If you’ve done most of this with different tooling, that’s fine.
- Solid grounding in security operations, detection engineering or incident response
- Hands-on experience with a SIEM platform, whichever one
- Comfortable with cloud security concepts across AWS or Azure
- Scripting ability for automating the repetitive parts
- Able to explain a finding to an engineer and to a manager, differently
- Australian work rights, Sydney based or willing to be
Application process
Send your CV and we’ll come back to you within a business day, either way. If your background fits, the first conversation is a thirty minute call to talk through what you’ve actually done and what you’re looking for next.
We’ll tell you which client and which role before we put you forward, and we won’t send your CV anywhere without asking you first.
