Remote Senior Security Engineer – Insider Threat & Investigations

Description:

• Lead high-complexity investigations involving sophisticated techniques and potential legal or regulatory considerations.
• Coordinate with Legal, People, and Security teams on investigation scope, evidence handling, privacy considerations, and response activities.
• Write detailed investigation reports documenting findings, evidence, impact, and recommendations for stakeholders.
• Respond to security events from detection through to containment, remediation, and resolution.
• Create and improve detection logic, correlation rules, and alerts across SIEM and EDR platforms.
• Proactively run threat hunting and anomaly detection exercises across Canva’s environment.
• Design and improve scalable tooling, workflows, and operational processes for incident detection and response.
• Act as an escalation point and incident coordinator during investigations and security incidents.
• Participate in a collaborative on-call rotation for critical security investigations and incident response.
• Mentor and support the growth of teammates through knowledge sharing and best practices.

Requirements:

• Experience leading or coordinating security investigations, digital forensics, or incident response in complex environments.
• Comfortable working cross-functionally with Legal, People, and Security teams, and communicating clearly under pressure.
• Ability to translate complex technical concepts for diverse audiences, including non-technical stakeholders.
• Experience building or improving detection, automation, case management, or response workflows at scale.
• Hands-on experience investigating macOS, Linux, and Windows systems.
• Proficient in designing, building, and improving security tooling and operational workflows.
• Confident working with SIEM, EDR, endpoint telemetry, and security investigation tools.
• Enjoy solving ambiguous problems and proactively improving systems and processes.
• Bring empathy, sound judgement, humility, and a collaborative mindset to investigations.
• Programming or scripting experience in languages such as Python, Golang, or Java.

Benefits:

• Equity packages to share in the company's success.
• Inclusive parental leave policy supporting all parents and carers.
• Annual Vibe & Thrive allowance for wellbeing, social connection, and office setup.
• Flexible leave options to recharge and support personal needs.