{"id":345955,"url":"https://alion.io/job/droneshield-detection-and-response-engineer","title":"Detection and Response Engineer","company":{"id":60436,"name":"DroneShield","domain":"droneshield.com","url":"https://alion.io/company/droneshield","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Sydney, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":60000,"max_usd":147000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Bash","optional":true},{"name":"Linux","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-09-01T05:23:38Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-28T09:24:09Z","board_verified":true,"closed_at":null,"days_open":57,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":57},"description":"Work with cutting-edge AI technology that helps make the world a safer and more secure place. DroneShield (ASX:DRO) develops market-leading counter-drone solutions used by military organisations, government agencies, airports, critical infrastructure operators, and law enforcement operating in some of the most challenging and high-stakes environments in the world. Employees work at the forefront of innovation, solving complex technical problems and delivering mission-critical capabilities where performance, reliability, and speed matter. \nAs an ASX200-listed company and the world's only publicly listed pure-play counter-drone business, DroneShield is experiencing rapid growth. Revenue increased from A$57 million in 2024 to more than A$217 million in 2025, supported by record profitability, a global sales pipeline exceeding A$2.5 billion, and annual R&D investment of over A$50 million. \nSince 2017, DroneShield has grown from 11 employees to more than 550 globally, with operations across Australia, the United States, Europe, and the Middle East, supporting customers in over 70 countries. \nThe role is based at DroneShield's Sydney headquarters, which houses corporate, commercial, engineering, and operational teams supporting the company's global growth and customer base. \nAbout the role \nDroneShield is seeking a Detection and Response Engineer with relevant experience to join the Security team in Sydney, NSW.\nThe Security team is a nimble team responsible for protecting DroneShield's assets and users. Our adversaries are sophisticated and use state-of-the-art tooling. To protect DroneShield, we need to focus on the biggest risks, eliminate threats, focus on automation to scale our efforts and continually increase the cost for the attackers.\nKey responsibilities for this role include own and improve our existing detection strategy, including tooling, custom detections, process, threat intelligence etc. This role will also be responsible for the response strategy including handling incidents, being incident commander, staff training, tooling and others. Other areas this role will influence and/or drive change are corporate security and vulnerability management.\nDetection and Response should be viewed as a closed loop. Detections should enhance responses and focus on providing enriched information to responders and improving the signal-to-noise ratio. Responders should leverage automated playbooks to respond to incidents as quickly as possible and use incident reviews as opportunities to improve or create new detections.\nThe ideal candidate will have a strategic view of both spaces and will drive change so that this loop works well - they will improve and implement our detection strategy to facilitate response and will use response metrics and learnings to influence new detections. They will enhance this process with threat intelligence and vulnerability management metrics as well.\nThe ideal candidate will have strong communication skills, being a hands-on engineer and will have a systemic view of the problem space focusing on solving the biggest problems and designing solutions that can scale. Experience in detection and response operations, including the investigation, triage, and management of security incidents. Exposure to incident coordination and stakeholder communication during security events is desirable. Experience with automation and forensics is highly desirable.\nThis position offers the opportunity to contribute to the security of hardware products with complex threat models.\nResponsibilities, Duties and Expectations \nDetection & Monitoring\nDevelop, tune, and maintain detection rules across SIEM and security tooling\nImprove signal-to-noise ratio by reducing false positives and enhancing alert fidelity\nLeverage threat intelligence, vulnerability data, and attacker techniques to build new detections\nIncident Response\nInvestigate and respond to security incidents across endpoints, cloud, and SaaS environments\nSupport incident handling from detection through containment, eradication, and recovery\nParticipate in incident response rotations and follow established runbooks\nAssist in coordinating cross-team response efforts during incidents\nAutomation & Tooling\nContribute to automation of detection and response workflows (e.g. scripts, playbooks)\nWork with security orchestration tools to improve response efficiency\nSupport development and improvement of internal security tools\nContinuous Improvement\nConduct post-incident reviews (RCA) and contribute to lessons learned\nIdentify gaps in detection and response capabilities and propose improvements\nMaintain and improve incident response documentation and runbooks\nCollaboration & Communication\nWork closely with engineering, IT, and security teams on investigations and improvements\nCommunicate findings and incident updates clearly to stakeholders\nContribute to building a strong security culture across the organization\nQualifications, Experience and Skills \n3-6 years of experience in security operations, incident response, or detection engineering\nHands-on experience investigating security incidents in cloud or enterprise environments\nFamiliarity with SIEM platforms and log analysis\nBasic scripting or programming experience (Python, Bash, KQL, Go or Powershell)\nUnderstanding of common attack techniques, malware behaviour, and threat lifecycle\nExperience with Linux/macOS command line environments\nKnowledge of cloud platforms (AWS, Azure or similar)\nStrong analytical and problem-solving skills\nNice to Have\nExperience with detection-as-code or infrastructure-as-code\nExposure to malware analysis or digital forensics\nExperience with automation frameworks or SOAR platforms\nUnderstanding of threat modelling and attacker methodologies\nFamiliarity with modern security tools (EDR, IDS, cloud security tools)\nInterest in leveraging AI/LLMs for security operations\nWhat Success Looks Like\nEffectively triaging and responding to security alerts with minimal supervision\nContributing meaningful improvements to detection coverage and response speed\nBuilding automation that reduces manual workload\nDemonstrating growth toward owning incident response and detection strategy\nWhy This Role\nHands-on exposure to real-world security incidents\nOpportunity to grow into a senior D&R or security engineering role\nWork in a fast-paced, high-impact security environment\nContribute to protecting critical systems and users\nNote for recruitment agencies: We do not accept unsolicited candidates from external recruiters unless specifically instructed.\nData Privacy\nDroneShield Group Pty Ltd collects and processes personal information for recruitment and hiring purposes. Where applicable, personal information is processed on the basis of DroneShield's legitimate interests in assessing and selecting candidates for employment. For further information regarding how we collect, use, disclose, store and retain personal information, including your privacy rights, please refer to our Privacy Policy: https://www.droneshield.com/privacy-policy","description_format":"text","description_chars":7070,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Air Defense","Electronic Warfare","Defense Manufacturing","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-09-05T18:34:01Z"}],"visa":[],"liveness":{"score":30,"band":"fade","label":"Fading","p_open":1,"p_active":0.658,"p_room":0.45,"age_days":57,"expected_fill_days":35,"reasons":["conf:1","win:tail"],"computed_at":"2026-10-28T05:59:10Z"},"pay":null,"html_url":"https://alion.io/job/droneshield-detection-and-response-engineer","json_url":"https://alion.io/job/droneshield-detection-and-response-engineer.json","meta":{"generated_at":"2026-10-28T11:27:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15010,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-29T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":60436},"rest":"https://alion.io/mcp/rest/get_company?id=60436"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdroneshield-detection-and-response-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdroneshield-detection-and-response-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdroneshield-detection-and-response-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/droneshield-detection-and-response-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdroneshield-detection-and-response-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":345955}},{"tool":"search_jobs","arguments":{"company":"droneshield.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":345955},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}