Senior Security Engineer - Defence

Xero
Auckland, Wellington
Workplace: HybridFull timeFunction: CybersecuritySkills: ["Shared ownership","Continuous learning","Leading complex initiatives","Collaborative problem-solving","Clear communication of technical risk"]

Design, build, and operate security defence capabilities that help Xero detect and respond to security threats. Partner across Security Operations, Security Response, CX, Product, and Engineering to turn threat intelligence into measurable controls. Lead complex technical initiatives, improve detection and response workflows across SIEM/SOAR/EDR and cloud security platforms, automate security operations, and help advance safe use of automation and AI.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Xero
Xero
1 day ago

Senior Security Engineer - Defence

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 10 hours agoStatus: Live

Job Summary

Design, build, and operate security defence capabilities that help Xero detect and respond to security threats. Partner across Security Operations, Security Response, CX, Product, and Engineering to turn threat intelligence into measurable controls. Lead complex technical initiatives, improve detection and response workflows across SIEM/SOAR/EDR and cloud security platforms, automate security operations, and help advance safe use of automation and AI.
Location: Auckland, Wellington
Workplace: Hybrid
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design, build, and operate security defence capabilities to detect and respond to threats.
  • •Lead complex technical work and help shape engineering direction within Security Defence and the wider Security team.
  • •Focus on detection, monitoring, and response workflows across SIEM, SOAR, EDR, and cloud security platforms.
  • •Create automation to reduce manual toil and improve how Security Operations responds to threats.
  • •Develop ways to measure detection coverage, control effectiveness, and operational reliability, including safe use of automation and AI in security engineering.

Key Requirements

  • •Hands-on experience designing, building, and operating production security capabilities or services.
  • •Programming or scripting skills, ideally Python, applying strong software engineering practices to security problems.
  • •Proficiency in security monitoring, detection, threat intelligence, incident response, and automation, including tools such as SIEM, SOAR, EDR, or cloud security platforms.
  • •Comfort working in cloud environments, particularly AWS, including cloud logging, identity, networking, and security services.
  • •Experience understanding adversary behaviours and frameworks like MITRE ATT&CK, with the ability to measure detection coverage and control effectiveness.
Experience:Security operationsThreat intelligenceIncident responseDetection engineeringCloud security
Skills:Shared ownershipContinuous learningLeading complex initiativesCollaborative problem-solvingClear communication of technical risk
Tech Stack:PythonSIEMSOAREDRAWSMITRE ATT&CKCloud loggingIdentityNetworkingSecurity services

Company Brief

Xero
Provides cloud-based accounting, payroll, and financial management software for small and medium-sized businesses, enabling invoicing, bank reconciliation, reporting, and integrations with third-party apps globally.
Industry: Enterprise Software
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Wellington, New Zealand
Founded: 2006
WebsiteLinkedIn