The role and its impact
This role sits within the global Security Operations function at Xero and acts as a critical link between Security, IT and Xero employees, ensuring that our workspace remains protected and compliant. You will be responsible for identifying and responding to signals across our IT environment, such as potential policy violations or the use of unauthorised devices, ensuring our people have the right tools to work securely.
Beyond daily monitoring, you will take a leading role in incident management and the upholding of security standards across internal Xero systems; playing an active role in shaping Threat Intelligence response within Xero.
Your work directly impacts the integrity of our internal systems, helping to identify security gaps and implement solutions that protect our global team.
The team and how they connect
The Workspace security team is a dedicated group that functions as the essential link between traditional IT Operations and advanced security operations.
Currently based across Australia and New Zealand, the team works collaboratively to monitor internal systems, resolve security-focused tickets, and safeguard our global digital workspace.
We prioritise knowledge sharing and a thorough approach to problem-solving to ensure our internal community remains productive and secure.
The team is currently working on
* Providing timely, accurate support to security incident management, as experts in our internal tooling.
* Refining our internal monitoring capabilities through our security stack, such as SIEM and Log Management tools
* Streamlining internal JSM queues to provide high-level, security-focused support to the wider business.
* Xero wide projects including mergers and acquisitions, new software onboarding and uplifts to our tooling.
Where and how you can work
This role offers flexibility within Australia, with a preference for candidates located in Melbourne, Sydney, or Perth.
We embrace a hybrid working model that balances the autonomy of remote work with the opportunity to connect in our office spaces. You will be part of a team that values a thorough approach to finding the right fit, ensuring you have the support needed to succeed in your region.
Here are some of the things we are looking for
* You bring a deep security-focused mindset with a background in Google Workspace or 365 Administration and SaaS application security.
* Experience with Endpoint Detection and Response software (familiarity with Crowdstrike EDR technology is beneficial)
* You possess a strong grasp of Security Information and Event Management (SIEM) and Data Loss Prevention (DLP) solutions.
* Your toolkit includes experience with email security solutions to protect our communications from external risks.
* A logical approach to problem-solving allows you to translate complex security signals into actionable support outcomes.
* You understand the importance of governance, ensuring our technical configurations adhere strictly to organisational policies and compliance standards.
Apply even if your experience isn't a perfect match At Xero, we hire based on your skills, passion, and the unique perspective you can bring to enhance our culture and team.