Senior Security Engineer

This is a fully remote position, open to applicants in Australia.

📋 Description

• Develop, optimize, and sustain security detection mechanisms and monitoring across EDR, endpoint, email, cloud, and network telemetry.

• Align detections with the MITRE ATT&CK framework utilizing native tool analytics and available log sources.

• Assist in end-to-end security incident response, encompassing detection, triage, investigation, containment, eradication, recovery, and post-incident analysis.

• Engage in proactive threat hunting and forensic/root-cause analysis.

• Take part in the on-call response rotation.

• Implement, configure, maintain, and enhance security tools while monitoring their health and performance.

• Contribute to cloud security efforts across Azure, AWS, and Microsoft 365.

• Aid in vulnerability scanning, risk-based prioritization, remediation, reporting, and metrics.

• Manage and enhance security controls and system hardening, particularly for Windows server and workstation security.

• Collaborate with IT and infrastructure teams on remediation efforts and security architecture.

• Offer technical information security support for audits, risk assessments, and third-party/vendor security evaluations.

• Work collaboratively with teammates to share insights and enhance processes.

• Complete additional special projects and responsibilities as assigned.

⛳️ Requirements

• Bachelor’s degree in Information Security, Computer Science, Information Systems, or a related field (or equivalent experience).

• 5 to 8 years of experience in security engineering, security operations, incident response, and/or vulnerability management.

• Advanced understanding of endpoint detection and response (EDR), cloud security (Azure/AWS/Microsoft 365), vulnerability management, incident response, and the MITRE ATT&CK framework.

• Experience in deploying and maintaining security tools in a hybrid (cloud and on-premises) environment.

• Familiarity with business-related processes, procedures, terminology, and compliance.

• Capability to analyze problems, identify root causes, and suggest solutions.

• Exceptional verbal and written communication abilities.

• Proficient in prioritizing and managing multiple projects under tight deadlines.

• Ability to work collaboratively with peers, leadership, and stakeholders.

• Commitment to confidentiality and privacy regulations, safeguarding company property and sensitive information.

• Preferred: 2+ years of experience in a regulated life sciences environment or within a large/complex enterprise.

• Preferred certifications: GCIH, GCIA, GCFA, GREM, OSCP, CISSP, or a cloud security certification (e.g., AZ-500, AWS Security).

• Preferred experience with EDR, cloud security posture management (CSPM), and vulnerability management platforms.

• Preferred scripting and automation skills (e.g., Python, PowerShell, KQL).

🏝️ Benefits

• Health and dental insurance coverage.

• Short- and long-term disability benefits.

• Paid time off.

• Paid parental leave.

• 401K plan.