Senior Security Engineer – Defence

About the role

As a Senior Security Engineer in Security Defence, you will design, build and operate capabilities that help Xero detect and respond to security threats. You will collaborate across Security Operations, Product, and Engineering to turn threat intelligence into reliable security controls.

Key responsibilities

• Design, implement and maintain detection, monitoring and response workflows across SIEM, SOAR, EDR and cloud security platforms.
• Automate security operations to reduce manual toil and improve response speed.
• Measure detection coverage, control effectiveness and operational reliability.
• Explore safe ways to incorporate automation and AI into security engineering.

Required profile

• Hands‑on experience building production security capabilities or services.
• Strong programming or scripting skills, preferably Python, applying software‑engineering best practices to security problems.
• Deep knowledge of security monitoring, detection, threat intelligence, incident response and automation.
• Experience working in cloud environments, especially AWS, and with cloud logging, identity, networking and security services.
• Understanding of adversary behaviours and frameworks such as MITRE ATT&CK, and ability to measure detection coverage and control effectiveness.

Required skills

• Python
• SIEM
• SOAR
• EDR
• AWS
• Cloud security platforms