Senior Security Engineer - Incident Response

Summary

Join the team redefining how the world experiences design as a Senior Security Engineer to lead a Pod within the Incident Response team, succeeding the current Pod Lead who is transitioning to a new role internally.

Requirements

• You have demonstrable experience in Incident Response (5 years +) or in one or more comparable technical roles with transferrable knowledge and skills, preferably with exposure to operating systems and cloud services outside the Microsoft ecosystem (e.g., AWS, GCP, macOS, Linux, etc.)
• First and foremost, you have a curious detective mindset and are driven to solve complex problems with simple solutions
• You possess confident verbal and written communication skills for leading technical and non-technical conversations with influence, adapting your style to suit the situation and your audience
• Your list of top five favourite things includes logs and more logs
• You have some experience leading and mentoring team members. Providing mentorship is close to your heart, and you thrive when empowering others to be their best

Responsibilities

• Respond to and coordinate security incidents that vary in scale, impact, and complexity in a professional and empathetic manner
• Conduct root cause analyses, drive post incident reviews, and identify opportunities to improve processes and prevent recurrences in collaboration with other teams
• Coach and mentor Incident Response team members, uplifting their skills, and enabling them to achieve their individual growth and impact goals
• Engage with the broader Security group and other Canva engineering teams to identify and proactively mitigate security risks and issues
• Participate in the on-call roster for security incident response, including triaging security events and escalating events to incidents as required
• Ensure that all team members are equipped with the knowledge and tools they need to succeed. This includes maintaining documentation and knowledge sharing through 1:1 sessions or lunch and learns
• Act as an escalation point for security incidents as needed
• Foster a positive and productive work environment by promoting collaboration, open communication, and continuous learning and development opportunities
• Collaborate with other teams in the Detection and Response subgroup on initiatives related to security automation, detection engineering, threat hunting, and cyber threat intelligence

Benefits

• Equity packages - we want our success to be yours too
• Inclusive parental leave policy that supports all parents & carers
• An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more
• Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally