Senior Threat Detection Engineer - Tooling and Automation (ANZ remote) at Canva

Australia

<h3>Job Description</h3><p><strong>Join the team redefining how the world experiences design.</strong></p><p>Hey, hello, hiya, g'day, mabuhay, kia ora, 你好, hallo, vítejte!</p><p>Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point.</p><p><strong>Where and how you can work</strong></p><p>Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work. That means if you want to do your thing in the office (if you're near one), at home or a bit of both, it's up to you.<br/> <br/> <strong>What you’d be doing in this role</strong></p><p>As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve.</p><p><strong>As a Senior Threat Detection Engineer, </strong>you will deliver high-impact security engineering solutions across our detection and platform engineering service streams. You will design and implement detection capabilities, automate security workflows, and enhance our security platform infrastructure. Your work will directly strengthen Canva's security posture by enabling faster threat detection, reducing analyst toil through automation, and scaling our security operations capabilities.<br/> We are not looking for someone who checks every single box, we’re looking for lifelong learners and people who can make us better with their unique experiences.</p><ul><li><strong>Lead detection engineering initiatives </strong>end-to-end, partnering with Application Security, CTI, and Red Team to conduct threat modelling, translate threat intelligence into high-fidelity detections, and implement detection-as-code practices using version control and CI/CD pipelines</li><li>P<strong>articipate in on-call rotation</strong> to support incident response and alert triage activities</li><li><strong>Design and build SOAR workflows and automation pipelines</strong> that automate detection triage, investigation, and response while reducing manual context-switching and cognitive load for analysts, improving mean-time-to-detect, analyse, and respond</li><li><strong>Design and/or maintain security platform infrastructure</strong> using infrastructure-as-code (Terraform/Ansible), establishing monitoring, alerting, and service-level objectives for platform health, detection coverage, and operational metrics</li><li><strong>Collaborate across security and engineering teams</strong> to provide technical consultation on detection strategy and platform capabilities</li></ul><p><strong>You're probably a match if you have</strong></p><ul><li><strong>Experience in detection engineering, threat hunting, or security operations (SOC)</strong>, with proven track record designing, implementing, and tuning detection logic for enterprise security platforms (SIEM, EDR, SOAR) and managing full detection lifecycle from threat research through deployment and maintenance</li><li><strong>Experience with Incident Response processes, alert triage and responding to security incidents</strong></li><li><strong>Hands-on experience with enterprise security platforms</strong> including SIEM platforms (Elastic Security, Splunk, or similar), EDR solutions (SentinelOne, CrowdStrike, Microsoft Defender, or similar), and SOAR platforms.</li><li><strong>Working knowledge of Infrastructure-as-code </strong>using Terraform/Ansible or similar tools to deploy and manage security infrastructure and understanding of DevOps practices.</li><li><strong>Experience with at least one cloud platform</strong> (AWS, GCP, or Azure).</li><li><strong>Understanding of containerisation</strong> and Kubernetes.</li></ul><p><strong>Beneficial Experience (not required, but helpful)</strong></p><ul><li>Background in Threat Hunting or Threat Intelligence.</li><li>Publishing research in blogs or contributing to open-source security tools.</li><li>Experience with advanced detection techniques: behavioural analytics, anomaly detection, machine learning-based detection and GenAI workflows.</li></ul><p><strong>About the team</strong></p><p><strong>The Detection &amp; Response (D&amp;R) </strong>organisation is responsible for protecting Canva from security threats through proactive detection engineering, incident response, and security platform operations. We operate at the intersection of security engineering and security operations, building and maintaining the detection capabilities, automation workflows, and security infrastructure that enable Canva to identify and respond to threats at scale.</p><p><strong>About DETA (Detection Engineering, Tooling &amp; Automation) </strong>DETA provides specialised security engineering services to enable Detection &amp; Response to prevent, detect, and respond to cyber attacks through specialised security engineering services that transform threats into automated, measurable protection.</p><p>You'll be joining DETA at a transformational moment as we mature our service-oriented engineering discipline. Your work will directly enable Canva to protect our vision to empower the world to design by and match the scale of cyber threats through automation and platform engineering. This is an opportunity to shape the future of detection engineering at Canva, establishing the technical and operational foundations that will support our security program as we continue scaling globally.</p><p><strong>What's in it for you?</strong></p><p>Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a stack of benefits to set you up for every success in and outside of work.</p><p><strong>Here's a taste of what's on offer:</strong></p><ul><li><p>Equity packages - we want our success to be yours too</p></li><li><p>Inclusive parental leave policy that supports all parents &amp; carers</p></li><li><p>An annual Vibe &amp; Thrive allowance to support your wellbeing, social connection, office setup &amp; more</p></li><li><p>Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally</p></li></ul><p>Check out lifeatcanva.com for more info.</p><p><strong>Other stuff to know</strong></p><p>We see AI as a powerful amplifier of creativity and technology at Canva. We’re evolving how we assess AI skills in our Technology hiring experience - you’ll tackle interactive, real-time challenges that reflect the kind of work we do. In some interviews, you may also be asked to solve a problem using an AI tool to show how you approach challenges with tech by your side. Your recruitment partner will walk you through what to expect.</p><p>We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.</p><p>Please note that interviews are conducted virtually.</p>