About the role
Who we are Employment Hero is on a mission to make employment easier and more valuable for everyone. Our Employment Operating System brings hiring, HR, payroll and
benefits into an all-in-one solution. Since our inception in 2014, we’ve scaled to a $2 billion valuation and gained a presence in 6 countries globally - Australia, New Zealand, Singapore, Malaysia, the UK and Canada. We now service over 300,000 businesses and more than 2 million employees. The EH Way At Employment Hero, we’re proud of our unique DNA, which we call The EH Way. We are Mission First - everything we do (from what we work on, to how we allocate capital and where we focus) is driven by our Mission We are Remote First - we champion a remote environment with a preference for asynchronous communication and a high degree of autonomy We are AI First - we are committed to using AI to accelerate our mission; AI is not just a tool, it’s a fundamental part of how we operate, innovate, and scale We Live by Our Values - we role model our values 100% of the time We Expect High Performance - we set a high standard and we’re not satisfied with being average This role The Security Engineer sits at the design and build end of the security function — owning the systems, integrations, and processes that protect 1,700 employees and the businesses who trust us with their data. You will work alongside the SOC team (including our 24/7 AI SOC Analyst), Engineering, IT, and stakeholders across the business to ship security capability, not just maintain it. Location and hours Remote-first, based on the east coast of Australia, preferably Sydney, but open to candidates anywhere in the AEST / AEDT timezone. You will work primarily during Australian business hours, with occasional overlap into other regions for incident response, major change windows, and global SOC handover. As a Security Engineer, you will be involved in: Design, deploy, and operate security platforms across endpoint, identity, network, email, and cloud — translating business
requirements into security architecture that engineering teams want to use. Build, tune, and own detections in CrowdStrike NGSiem and our SOAR — and expand the set of detections our 24/7 AI SOC Analyst can enrich and confirm using non-NGSiem sources. Design and implement AI workflows or tools that provide material benefit to the broader security team and EH as a whole Run large security projects end-to-end: scope, stakeholder alignment, technical design, rollout, and operational handover to the SOC. Understand unfamiliar systems quickly — assess them, identify security risk, design controls, and partner with system owners to remediate at the root cause. Lead complex incident response activities and post-incident reviews, turning lessons learned into durable detections, controls, and runbooks. Conduct cloud and SaaS security reviews against security-by-design principles. Mentor SOC Analysts on detection engineering, automation, and investigation craft. Identify opportunities to use AI to remove toil from
