Xero

Security Engineer - GCP

Singapore Remote Hybrid
Python GCP AWS Machine Learning
Description
Xero is a beautiful, easy-to-use platform that helps small businesses and their accounting and bookkeeping advisors grow and thrive. 

At Xero, our purpose is to make life better for people in small business, their advisors, and communities around the world. This purpose sits at the centre of everything we do. We support our people to do the best work of their lives so that they can help small businesses succeed through better tools, information and connections. Because when they succeed they make a difference, and when millions of small businesses are making a difference, the world is a more beautiful place.

We are looking for a SOC Security Engineer based in Singapore to join our Security Engineering function at Xero. This role requires overlap with both South Africa and ANZ timezones as you will be part of a cross-regional team.

About the team
The Defence pod at Xero is a Detection and Software Engineering team within Security Operations. This team’s primary focus is to strengthen and enhance threat detection and improve security automation. The team manages tools such as SOAR, SIEM, and EDR, along with a variety of custom-built tools, primarily in Python.

About the role
The Defence pod works with our internal Security Response team and their analysts. It plays a key role in ensuring that detection tools are maintained, highly available, and adhere to strong engineering standards. Experience in cloud technologies (GCP specifically along with AWS and others) will be required.
This role requires a range of technical skills, the ability to adapt to new situations and technologies, and strong teamwork. 

What you'll do

  • Developing Detection Logic: Crafting advanced queries, rules, and signatures for platforms like the SIEM to detect anomalous or malicious activity.
  • Data Pipeline Management: Ensuring log sources are ingested, normalized, and enriched for maximum visibility, maintaining the integrity and performance of data pipelines.
  • Automation and Scripting: Building tools and scripts to automate repetitive tasks, create custom detection mechanisms, and integrate platforms for streamlined workflows.
  • Prototyping and Innovation: Experimenting with new technologies, techniques, and machine learning models to advance detection capabilities.
  • Continuous Improvement: Iteratively refining detection logic based on attack simulations and post-incident reviews to address gaps and improve resilience.
  • Threat Research and Intelligence: Staying updated on the latest threat actor tactics, techniques, and procedures (TTPs) and incorporating them into detection strategies.
  • Incident Support: Collaborating with response teams during investigations by providing insights, creating custom queries, or adjusting detections in real time.
  • Tool Development and Automation: Building scripts, dashboards, and playbooks to streamline and enhance detection and investigation processes.

What you'll bring with you

  • Relevant engineering experience building and deploying solutions in a production environment on Google Cloud Platform (GCP)
  • Experience with Python
  • Experience with SOAR tools
  • Understanding of Security Operations Centre (SOC)
Please note:
We will be observing a holiday shutdown period, during which there may be delays in our recruitment process, including responses and updates. We’ll resume full operations in the week commencing 13th January. Thank you for your patience and understanding.

Why Xero?
Offering very generous paid leave to use however you’d like (plus statutory holidays!), dedicated paid leave to care for your physical and mental wellbeing as well as an Employee Assistance Program to access mental health care for you and your family, life insurance, employee resource groups, 26 weeks of paid parental leave for primary caregivers, an Employee Share Plan, beautiful offices with weekly fitness and yoga classes, flexible working, career development,  and many other benefits that reflect our human value, you’ll do the best work of your life at Xero.
Xero
Xero
Accounting Billing FinTech Personal Finance SaaS Software

0 applies

0 views

Other Jobs from Xero

Senior Cloud Engineer at Xero

Auckland, NZ Remote Hybrid

Senior Cloud Engineer at Xero

Melbourne, Australia Remote Hybrid

Lead Product Manager - AI

Remote Melbourne, Australia

Lead Product Manager - AI

Remote Auckland, NZ

There are more than 50,000 engineering jobs:

Subscribe to membership and unlock all jobs

Engineering Jobs

60,000+ jobs from 4,500+ well-funded companies

Updated Daily

New jobs are added every day as companies post them

Refined Search

Use filters like skill, location, etc to narrow results

Become a member

🥳🥳🥳 452 happy customers and counting...

Overall, over 80% of customers chose to renew their subscriptions after the initial sign-up.

To try it out

For active job seekers

For those who are passive looking

Cancel anytime

Frequently Asked Questions

  • We prioritize job seekers as our customers, unlike bigger job sites, by charging a small fee to provide them with curated access to the best companies and up-to-date jobs. This focus allows us to deliver a more personalized and effective job search experience.
  • We've got about 70,000 jobs from 5,000 vetted companies. No fake or sleazy jobs here!
  • We aggregate jobs from 5,000+ companies' career pages, so you can be sure that you're getting the most up-to-date and relevant jobs.
  • We're the only job board *for* software engineers, *by* software engineers… in case you needed a reminder! We add thousands of new jobs daily and offer powerful search filters just for you. 🛠️
  • Every single hour! We add 2,000-3,000 new jobs daily, so you'll always have fresh opportunities. 🚀
  • Typically, job searches take 3-6 months. EchoJobs helps you spend more time applying and less time hunting. 🎯
  • Check daily! We're always updating with new jobs. Set up job alerts for even quicker access. 📅

What Fellow Engineers Say