Detection & Response Engineer

Location: Sydney

Department: Engineering

About the Role

We are hiring a Detection & Response Engineer to help build FSAI's security program from the ground up. As one of our founding hires, you will own an entire domain, not just a slice of someone else's project. You'll serve as an incident handler on our on-call rotation, balanced across Australia and North American time zones so that coverage follows the sun rather than asking you to work off-hours. We treat security as a systems problem: our default is to solve problems smartly through automation and scale, engineering our way out of manual toil rather than accepting a baseline of endless ticket processing. We seek out industry-leading vendors and approaches rather than defaulting to what is slow and safe, and we design controls that protect the business without degrading the engineering or end-user experience. This is all new, so expect it to be bumpy while we build it out.

Responsibilities

• Design, build, test, and tune high-fidelity detections across endpoints, cloud, identity, and infrastructure, aligned to attacker TTPs
• Build and improve log onboarding, enrichment, and the pipelines that feed detection and investigation on our logging platform (e.g., Scanner)
• Build automation (e.g., Tines) that scales triage, investigation, and response, wired directly into our on-call and paging systems (e.g., incident.io, PagerDuty)
• Translate raw intel and security research into actionable, automated detection logic
• Investigate alerts, drive incidents to resolution, and coordinate with the endpoint stack (e.g., CrowdStrike, Microsoft Defender, Huntress), feeding lessons learned back into detections and runbooks

Minimum Qualifications

• 5+ years of experience in detection engineering, security operations, or security engineering
• Strong scripting and development skills in Python and/or Go
• Proven experience building detections against large-scale log data and working with a logging or SIEM-style platform
• Deep knowledge of operating-system internals, cloud (AWS) security concepts, and common attacker techniques
• A strong bias toward automating recurring problems rather than absorbing them

Preferred Qualifications

• Depth in threat hunting, digital forensics, malware analysis, or threat intelligence
• Experience with detection-as-code and building CI/CD pipelines for detections
• Familiarity with automation/SOAR platforms and case management systems
• Experience applying ML/LLM techniques to detection (e.g., enrichment, correlation, risk-based alerting)

Why Join Us?

• A high-performance culture
• State-of-the-art technology
• Experience world-class leadership
• Scale of impact and purpose
• A competitive salary and a huge growth trajectory
• Work with the best in the industry
• Flexible work environment
• Diversity and creativity