Detection Engineer, Security Operations

About the role

Write the detections our 24/7 SOC depends on. As part of the APAC Tier 3 team, you will turn threat intelligence into high-fidelity detections and lead investigations when something real happens.

What you’ll do

• Build and tune detections across SIEM, endpoint and cloud telemetry
• Lead Tier 3 investigations and incident response for APAC clients
• Run threat hunts based on current adversary tradecraft
• Coach Tier 1 and 2 analysts in Manila and Mumbai

What you’ll bring

• 5+ years in security operations, incident response or detection engineering
• Strong query skills (KQL, SPL or similar) and scripting
• Right to work in Australia

Nice to have

• GCIH, GCIA or similar certifications

Location and working arrangement

This role is hybrid, based in our Melbourne office. You’ll need to be able to work from Melbourne on a regular basis, and your team agrees its own rhythm for being together.

The application asks whether you are authorized to work in Australia or will need visa sponsorship. Sponsorship depends on the role and the country; your recruiter will be clear about what is possible before you invest time in interviews.

Compensation

A$185,000 – A$210,000 per yearBase salary, plus superannuation.

Where you land in the range depends on your experience and skills, not on how well you negotiate. Any offer we make is within this range.

How to apply

1. ApplyAbout five minutes. You get a private link to track your application.
2. Recruiter reviewA recruiter reads every application, usually within five business days.
3. Recruiter screenA 30-minute call about your experience and what you are looking for.
4. InterviewsUsually two to three conversations with the team, including a practical exercise relevant to the role.
5. OfferPay is always within the range on the listing. We check references before you start.

You’ll need your résumé (PDF, Word (.doc or .docx), RTF or plain text, up to 5 MB) or a link to your LinkedIn profile or online résumé. Applying takes about five minutes, and you can create a candidate account to save your progress and follow every application in one place. How we hire explains each step.

Apply now

Working at Moraph

We build and operate software for credit unions, hospitals and government agencies, where a failure means a regulatory breach or a patient-safety incident. We work as one team across New York, London, Sydney, Buenos Aires, Yerevan, Mumbai, Manila and more, on the same tools and to the same standards. Everyone gets the same high-spec laptop, software and security tooling, whichever office they work from.

Equal opportunity and accommodations

Moraph is an equal opportunity employer. We welcome applicants of every background and provide reasonable accommodations throughout the hiring process. Tell us in your application, or email careers@moraph.com. How to ask for an accommodation.