Senior Corporate Security Engineer

Your role

As a Senior Corporate Security Engineer, you will be a critical part of defending Airwallex’s enterprise systems and employees from threats such as malware, phishing and unauthorised access.

This role is a highly technical opportunity to detect, investigate and prevent security issues across a modern corporate environment. You will work on digital forensics, incident response and tool development and deployment, protecting a range of corporate IT platforms from endpoints to identity providers.

What you’ll be doing

• Contribute to incident response for malware, phishing, digital forensics.

• Design, develop, test, and evaluate new corporate security controls for a rapidly growing business.

• Perform incident response and hunt through log sources to identify new threats.

• Design and implement security alerts and workflows to support the incident response lifecycle.

• Secure corporate IT infrastructure and remediate issues across identity providers, endpoints, corporate networks and other platforms.

• Deploy, configure and operate security tooling with a laser focus on impact.

What you’ll bring

• A passion for solving the complex challenges of high-growth startups.

• Self motivation and drive to learn new skills, or dive deeper into existing skills.

• Bachelor’s degree in Computer Science, Cybersecurity or similar.

• 5+ years working in a security engineering or incident response role within a tech company.

• Strong experience with Crowdstrike, Splunk or other common security monitoring tools.

• In depth understanding of common attacker tools and techniques, how they can be detected and prevented, and ability to respond to incidents with high depth and quality of investigation.

• Experience with GCP, Alibaba Cloud or other cloud platforms is preferred.

• Experience with Okta, Google Workspace and cloud-based VPN services is preferred.

• Experience securing endpoints, including with MDM tooling such as Kandji, Intune

• Strong communication skills with the ability to explain technical security and software concepts to a non-technical audience.

• Scripting experience such as with Python, Bash, Powershell.