SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Xero is seeking a Senior Security Engineer to join its Security Defence team, which sits at the centre of threat detection, investigation, and response. In this role, you will design, build, and operate security capabilities that detect and respond to threats across Xero's platform, protecting both customers and the business.
You will work across Security Operations, Security Response, Customer Experience, Product, and Engineering teams, translating threat intelligence and security requirements into reliable, measurable security controls. Your responsibilities include designing detection and monitoring workflows across SIEM, SOAR, EDR, and cloud security platforms; building automation that reduces manual toil and accelerates incident response; measuring detection coverage and control effectiveness; and exploring safe, valuable ways to integrate automation and AI into security engineering.
As a senior individual contributor, you will lead complex technical initiatives, help shape the team's engineering direction, and foster a culture of shared ownership and continuous learning. You'll influence outcomes and drive decisions without relying on formal authority, explaining technical risks and trade-offs with clarity to stakeholders across the organization.
The ideal candidate brings hands-on experience designing and operating production security capabilities or services. You have strong programming or scripting skills, ideally in Python, and apply sound software engineering practices to security problems. You are well-versed in security monitoring, detection, threat intelligence, incident response, and automation, with practical experience using SIEM, SOAR, EDR, and cloud security platforms. You are comfortable working in cloud environments, particularly AWS, including cloud logging, identity, networking, and security services. You understand adversary behaviours and frameworks like MITRE ATT&CK, and know how to measure detection coverage and control effectiveness.
The role is based in Auckland or Wellington with a hybrid working model, offering flexibility to work from home while connecting with colleagues during designated boost days. Xero values diverse perspectives and encourages applications even if your experience isn't a perfect match.
