Security Engineer - (Detection & Response)

We’re looking for a Senior Security Operations Engineer to take ownership of a sophisticated detection and response environment, spanning EDR/XDR, detection engineering, cloud security posture, SOAR and AI-assisted security operations.

This is a hands-on senior engineering role for someone who wants more than simply operating security tooling. You’ll help shape how the platforms are configured, integrated and automated – building detection capability as code and helping develop the next generation of AI-assisted investigation and response.

You’ll work across technologies including CrowdStrike Falcon, Next-Gen SIEM, CSPM/CNAPP platforms, Python, APIs, Git and CI/CD, with opportunities to work on AI agents and emerging security automation capabilities.

What You’ll Be Doing

• Own and enhance the EDR/XDR platform stack end-to-end, including policy configuration, tuning, custom detection rules and real-time response.
• Develop capabilities across identity threat detection and response (ITDR) and exposure management.
• Build and improve detection engineering as code, working closely with security analysts.
• Help develop AI-assisted investigation and triage capabilities, including agents within Charlotte AI / CrowdStrike.
• Build feedback loops between detections, investigations and platform integrations to continually improve security outcomes.
• Develop and integrate SOAR and automation capabilities within a Next-Gen SIEM environment.
• Own cloud and SaaS security posture, including CSPM/CNAPP onboarding, policies, frameworks, runtime security, secrets and identity scanning.
• Integrate cloud security posture capabilities with SIEM and the broader security operations ecosystem.
• Build integrations and automation using Python and APIs, supported by Git and CI/CD practices.

You’ll bring strong hands-on security engineering experience and genuine depth across modern detection and response platforms.

Essential Experience

• Deep technical expertise with enterprise EDR/XDR platforms, ideally CrowdStrike Falcon.
• Strong CSPM/CNAPP and cloud security posture experience, with Wiz highly regarded.
• Hands-on detection engineering experience, including managing the detection lifecycle as code.
• Experience with security platform query languages such as CQL or equivalent.
• Strong SOAR, automation and security integration experience.
• Practical development capability with Python and APIs.
• Experience working with Git and CI/CD pipelines.

Experience with any of the following will set you apart:

• CrowdStrike across EDR, Next-Gen SIEM, Cloud Security and related capabilities.
• Wiz.
• AI-assisted security operations and building AI agents.
• OpenAI / Codex technologies.
• Identity Threat Detection & Response (ITDR).
• Security across AWS, Azure and/or GCP.
• Advanced detection engineering and security automation.

This is an opportunity to take genuine ownership of a modern SecOps platform environment rather than simply maintaining existing tooling.

You’ll work at the intersection of security engineering, detection and response, cloud security, automation and AI, helping build capabilities that directly improve how threats are identified, investigated and contained.

Contract: 12 months

Rate: $850-$930 per day including super

Location: Brisbane

Start: ASAP

If you’re a senior security engineer who enjoys building, automating and improving detection and response platforms, Apply now or reach out to [email protected] for a confidential discussion.