{"id":2517117,"url":"https://alion.io/job/rea-group-senior-security-engineer-detection-engineer","title":"Senior Security Engineer (Detection Engineer)","company":{"id":11737,"name":"REA Group","domain":"rea-group.com","url":"https://alion.io/company/rea-group","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":28,"computed_at":"2026-10-14T06:34:16Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Richmond, Australia"],"countries":["AU"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":82000,"max_usd":190000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-14T10:02:54Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-14T14:31:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We're taking an engineering-led approach to detection and response, building internal capability and technical depth alongside AI-assisted tooling. You’ll work as an individual contributor, driving workstreams from problem definition through delivery, breaking complex problems into actionable work, and executing independently within agreed architecture and practices\nPermanent role based in Melbourne or Sydney as well as open to remote in other Australian locations\nWe're REA\nWith bold and ambitious goals, REA Group is changing the way the world experiences property. No matter where you're at on your property journey, we're here to help with every step - whether that's finding or financing your next home.\nOur people are the key to our success. At the heart of everything we do, is a thriving culture centred around high performance and care. We are purpose driven and collaborative, which drives innovation and our ability to make a real impact. As such, we’re proud to have been named one of Australia’s Best Workplaces four times since 2021 - including third place in 2025 - plus Best Workplace for Women in 2023 and Best Workplace in Technology in 2024 and 2025. These listings are testament to every person who helps make REA a great place to work.\nWhere the team fits in\nThe Detection & Response team helps REA identify, investigate and respond to cyber threats across our environment. The team monitors security signals, validates alerts, investigates suspicious activity and leads or supports coordinated incident response including technical investigation and containment in partnership with engineering teams. With an increasing focus on detection and response engineering, the team continually strengthens REA’s ability to spot threats earlier, reduce the impact of incidents and learn from events to improve our security posture.\nWhat the role is all about\nAs a Senior Security Engineer in Detection & Response, you’ll help modernise REA’s detection capability by operating and improving the data flows, telemetry integrations and detection workflows that power the detection platform. You’ll use AI-assisted tooling to develop, review and validate high-fidelity detections and response automations, applying sound security judgement and detection-as-code practices to improve coverage and alert quality. You’ll evaluate threat intelligence in the context of REA’s environment to focus detection coverage on relevant adversaries, investigate suspicious activity, and independently coordinate technical containment and response. You’ll work with and be supported by a diverse, dynamic, and well-rounded Detection & Response team. Working with wider Security and Engineering teams, you’ll improve detection quality and resilience over time.\nDay to day of the job\nConfigure and operate the data flows that support our detection platform, including log forwarding, transformation and cost optimisation, working with Platform and Cloud teams where changes to existing integrations are needed.\nDefine the threats and behaviours to detect, then review, tune and validate the high-fidelity detections and correlation logic that identify malicious activity across our environment, delivering measurable improvements in detection coverage and alert quality.\nDevelop and maintain automated detection testing and validation processes to identify configuration drift, regressions and coverage gaps.\nAnalyse security events and logs to identify malicious activity, patterns and emerging attack techniques during investigations and proactive threat hunting.\nAssess relevant threat intelligence and emerging attack techniques in the context of REA’s environment, translating the findings into improved detection coverage and signal quality.\nInvestigate security alerts and incidents, independently determine whether containment is required, coordinate technical response activities, and communicate findings, actions and risks to the wider incident response team and business stakeholders as needed.\nDevelop response playbooks and automation workflows to support rapid and effective incident containment and response.\nPartner with product, platform and engineering teams to ensure new systems and changes have appropriate logging, monitoring and detection coverage.\nShare knowledge with other Security and engineering teams, contributing to documentation, operational practices and continuous improvement.\nWho we’re looking for\nHands-on experience configuring and operating data flows, including log forwarding, data transformation, API integrations, cost-optimised ingestion and observability pipeline tools, with the ability to work with Platform and Cloud teams when existing integrations need changes.\nPractical experience working in cloud environments (AWS, GCP or Azure), with an understanding of cloud and application architectures, logging, monitoring, native security controls and common failure modes, and how to translate these into detection and response requirements.\nPractical experience defining the threats and behaviours to detect, and reviewing, tuning and validating high-fidelity detections through established detection-engineering practices and repository workflows.\nStrong log analysis skills, with the ability to parse, correlate and investigate security events across diverse log sources, and a working knowledge of scripting to understand and work effectively with security automation and SOAR workflows.\nExperience with security observability tooling including EDR, SIEM, CNAPP, SOAR, and identity platforms, understanding their telemetry and how to leverage it for high-fidelity detections\nSolid understanding of attacker techniques and frameworks (e.g. MITRE ATT&CK) and how to translate threat intelligence into effective detections and coverage assessments\nFamiliarity with modern DevOps practices including CI/CD pipelines and automated deployment for security tooling\nAbility to build automation workflows for security operations and document operational procedures through playbooks, runbooks and detection test cases\nThe REA experience\nThe physical, mental, emotional and financial health of our people is something we’ll never stop caring about. This is a place to learn and grow.\nSome of our Perks & Benefits include:\nA hybrid and flexible approach to working\nFlexible leave options including, birthday leave and purchase additional leave\nFlexible parental leave offering for primary and secondary carers\nOur Because We Care program offers employees volunteering leave, community grants, matched payroll giving and our Community Café donates 100% of revenue to charity\nHackdays so you can bring your big ideas to life \nOur commitment to Diversity, Equity, and Inclusion\nWe are committed to providing a working environment that embraces and values diversity, equity and inclusion. We believe teams with diverse ideas and experiences are more creative, more effective and fuel disruptive thinking. If you've got the skills, dedication and enthusiasm to learn but don't necessarily meet every single point on the job description, please still get in touch.\nJoin our Talent Neighbourhood\nKeen to be part of REA but didn't find a perfect match with this opportunity? Perhaps the timing isn't right? You should join our Talent Neighbourhood!","description_format":"text","description_chars":7274,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["PropTech","Online Classifieds","Mortgage Lending & Brokers"],"lifecycle":[{"event":"open","at":"2026-10-14T10:02:54Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":28,"reasons":["conf:15","win:early"],"computed_at":"2026-10-15T05:33:57Z"},"pay":null,"html_url":"https://alion.io/job/rea-group-senior-security-engineer-detection-engineer","json_url":"https://alion.io/job/rea-group-senior-security-engineer-detection-engineer.json","meta":{"generated_at":"2026-10-15T05:33:57Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8176,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":11737},"rest":"https://alion.io/mcp/rest/get_company?id=11737"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frea-group-senior-security-engineer-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frea-group-senior-security-engineer-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frea-group-senior-security-engineer-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rea-group-senior-security-engineer-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frea-group-senior-security-engineer-detection-engineer"}]}