Associate Security Engineer

The role and its impact

As an Associate Security Engineer in our Security Defence team, you'll help design, build and continuously improve the capabilities we rely on to detect, investigate and respond to security threats.

You'll work alongside Security Operations, Security Response, Engineering, Product, CX and Legal, turning threat intelligence and security requirements into practical, reliable controls that keep Xero and our customers safe.

You’ll develop your engineering capability through delivery, pairing, incident participation, and learning from more experienced engineers while contributing to the protection of Xero and our customers.

The team and how they connect

Security Defence sits at the heart of how Xero detects and responds to threats, working across SIEM, SOAR, EDR and cloud security tooling to keep our platform and customers protected.

The team works closely with Security Operations, Security Response, Engineering and Product to turn insight into action, and prides itself on a high-trust, blameless, learning-oriented culture where questions and curiosity are always welcome.

The team is currently working on / Initially, you will focus on

Monitoring, investigating, and responding to security alerts and suspected incidents with guidance from experienced engineers and analysts.

Contribute to detection, monitoring, enrichment, and response workflows across security platforms such as SIEM, SOAR, EDR, cloud security, and related services.

Building and improving detection content, integrations, dashboards and alerting across our security platforms

Developing runbooks, playbooks and automations that reduce manual effort and speed up response

Expanding threat-intelligence-led detection engineering and automation coverage across Xero

Where and how you can work

This role is based in our Melbourne office, offering a hybrid working model that balances local team presence with a global scope of work.

You will have the flexibility to work from home while connecting with your colleagues in our modern office space during designated boost days.

Here are some of the things we're looking for

A growth mindset and real curiosity in security engineering, cyber security, software engineering, cloud security, detection engineering, or a closely related discipline.

Comfortable picking up an unfamiliar codebase or platform and applying established patterns with guidance.

You Go Bold by turning threat intelligence and security research into practical, measurable detections and controls.