Senior Cyber Security Engineer – Detection and Response

Our Vision

Our vision is to connect 1 billion people to the healing power of nature. A wholly owned subsidiary of Kirin Holdings, Blackmores Group is a leading natural health company with proud Australian heritage. We operate across Asia-Pacific and Greater China, delivering high-quality, evidence-based health solutions that help people live healthier lives.

Opportunity

Join Blackmores Group and play a critical role in protecting a trusted health and wellbeing organisation during a period of significant business and technology transformation. As our Senior Cyber Security Engineer (12 months fixed term role), you will lead the technical evolution of our Detection and Response capability across endpoint, cloud, identity, network and operational environments.

As a senior member of our Cyber Security team, you'll act as the subject matter expert for Detection & Response, partnering with technology teams, projects, vendors and managed security providers to strengthen Blackmores' security posture and response capability.

What's in it for you?

• Play a key role protecting a global organisation through a significant SAP transformation program

• Lead and influence cyber detection and response capabilities across endpoint, cloud, identity and network environments

• Work with the modern Microsoft technology security stack.

• This role reports to the Head of Cyber Governance and Operations; we are open for this person to be based in Sydney, working out either from our Surry Hills or Warriewood offices or based in Victoria, working from our Braeside Manufacturing Site. This role will follow our flexible work arrangements of working at least 3 days per week from office and 2 days per week from home.

• This is a senior individual-contributor role with technical leadership responsibility. The position does not currently have direct reports but will provide technical direction to internal teams, service providers and incident-response participants.

What will you be doing?

Detection & Monitoring

• Lead the development, tuning and optimisation of Blackmores' detection and monitoring capabilities

• Maintain and enhance detection use cases across EDR, SIEM, cloud, identity and network security platforms

• Assess monitoring coverage, identify detection gaps and improve visibility across the environment

• Lead onboarding of new log sources and monitoring capabilities

• Drive continuous improvement of alert quality and detection effectiveness

Incident Response

• Lead technical investigations and response activities for cyber security incidents

• Coordinate containment, eradication and recovery activities

• Provide technical leadership during major cyber incidents

• Support executive reporting, lessons learned and post-incident reviews

• Maintain incident response procedures, runbooks and playbooks

Threat Hunting & Cyber Analytics

• Lead proactive threat hunting activities across enterprise environments

• Analyse emerging threats and determine relevance to Blackmores

• Improve detection logic based on threat intelligence, trends and findings

• Identify opportunities to strengthen cyber resilience and response readiness

Project & Technology Enablement

• Provide cyber security SME input into projects, technology initiatives and transformation programs

• Define monitoring, logging, alerting and response requirements for new technologies

• Develop high-level Detection & Response integration requirements and designs

• Ensure new platforms can be effectively monitored and supported by Cyber Security Operations

SOC & Vendor Management

• Lead operational engagement with external SOC and managed security service providers

• Review service performance and drive continuous improvement initiatives

• Provide technical validation and direction during investigations and incidents

• Ensure outsourced services align with Blackmores' cyber security objectives

Process & Continuous Improvement

• Contribute to cyber security standards, frameworks and operational procedures

• Support audit, compliance and cyber governance activities

• Maintain operational documentation and response processes

• Drive initiatives that improve Detection & Response capability maturity

What We're Looking For?

Experience

• 10+ years' experience in security operations, detection engineering, incident response or cyber defence roles

• Demonstrated experience leading cyber investigations and incident response activities

• Strong experience with EDR and SIEM technologies

• Solid understanding of attacker techniques, MITRE ATT&CK, malware behaviours and security telemetry

• Experience working with managed security providers and SOC environments

Technical Skills

• Experience with Microsoft Defender for Endpoint or similar EDR platforms

• Experience with Microsoft Sentinel or comparable SIEM solutions

• Understanding of threat hunting, log analysis and event correlation

• Working knowledge of Windows, Linux and network security concepts

• Familiarity with SOAR capabilities and security automation

Desirable

• Experience with Azure and Microsoft 365 security monitoring

• Exposure to Operational Technology (OT) environments

• Scripting capability using KQL, PowerShell or Python

Personal Attributes

• Strong stakeholder engagement and influencing skills

• Ability to communicate complex technical concepts in business language

• Excellent problem-solving and decision-making capability

• High levels of ownership, accountability and professional judgement

• Calm, resilient and effective during high-pressure cyber incidents

At Blackmores, you'll join a purpose-led organisation committed to helping people take control of their wellbeing. You'll have the opportunity to make a real impact, contribute to meaningful business outcomes, and grow your career within a supportive and collaborative environment.

Agencies please note: this recruitment assignment is being managed directly by the Blackmores Talent Acquisition team. We will reach out to our preferred agency partners if required. Your respect for this process is appreciated.