Security Engineer
About Us
We are a rapidly growing technology company, empowering businesses worldwide with innovative payment and financial solutions. Our unique combination of proprietary infrastructure and software enables us to provide fully integrated solutions for managing business accounts, payments, spend management, and treasury at a global scale.
Proudly founded in Melbourne, we have a team of over 1,700 talented individuals across 26 offices globally. Valued at US$6.2 billion and backed by leading investors, we are leading the charge in building the future of payments and financial platforms.
About the Role
The Information Security Team is a high-calibre group that works across our infrastructure, application security, Corporate IT, and broader engineering functions.
As a Corporate Security Engineer, you will play a critical part in defending our enterprise systems and employees from threats such as malware, phishing, and unauthorised access. This role offers a highly technical opportunity to detect, investigate, and prevent security issues across a modern corporate environment. You will work on digital forensics, incident response, and tool development and deployment, protecting a range of corporate IT platforms from endpoints to identity providers.
This role will be based in Shanghai, Sydney, or Melbourne.
* Contribute to incident response for malware, phishing, digital forensics.
* Design, develop, test, and evaluate new corporate security controls for a rapidly growing business.
* Perform incident response and hunt through log sources to identify new threats.
* Design and implement security alerts and workflows to support the incident response lifecycle.
* Secure corporate IT infrastructure and remediate issues across identity providers, endpoints, corporate networks, and other platforms.
* Deploy, configure, and operate security tooling with a laser focus on impact.
Requirements
We're looking for people who meet the minimum qualifications for this role. The preferred qualifications are great to have, but are not mandatory.
* A passion for solving complex challenges of high-growth startups.
* Self-motivation and drive to learn new skills or dive deeper into existing skills.
* Bachelor's degree in Computer Science, Cybersecurity, or similar.
* At least 3-4 years working in a security engineering or incident response role within a tech company.
* Strong experience with Crowdstrike, Splunk, or other common security monitoring tools.
* In-depth understanding of common attacker tools and techniques, how they can be detected and prevented, and ability to respond to incidents with high depth and quality of investigation.
* Experience with GCP, Alibaba Cloud, or other cloud platforms is preferred.
* Experience with Okta, Google Workspace, and cloud-based VPN services is preferred.
* Experience securing endpoints, including with MDM tooling such as Kandji, Intune.
* Strong communication skills with the ability to explain technical security and software concepts to a non-technical audience.
* Scripting experience such as with Python, Bash, Powershell.
What We Offer
We pride ourselves on being an equal opportunity employer. We value diversity and consider anyone seeking employment at our organisation based on merit, qualifications, competence, and talent. We don't regard colour, religion, race, national origin, sexual orientation, ancestry, citizenship, sex, marital or family status, disability, gender, or any other legally protected status when making our hiring decisions. If you have a disability or special need that requires accommodation, please let us know.