About the job

About usWe’re Littlepay - a growing fintech headquartered in Melbourne with operations in the UK, EU, LATAM, USA, and more recently, Australia. Our payments platform enables our customers to pay for public transport using any payment card, mobile wallet, or wearable device. Processing over USD 1 billion a year in 19 countries and continuing to expand globally, we’re proud to move more people through better payment experiences.

About the roleReporting to the Head of Security, this role supports key functions across security operations and architecture, with a strong focus on enhancing threat detection capabilities and incident response.

This is an exciting opportunity for someone passionate about security and technology who is looking to deepen their expertise in threat detection and response. You’ll play a hands-on technical role in strengthening the resilience of Littlepay’s platform while contributing to the team’s broader security objectives.

• What you’ll doBuild and tune detection logic within the SIEM using "Detection-as-Code" principles. Automate incident response playbooks via SOAR to reduce manual toil.
• Act as a technical escalation point for the SOC. Investigate security alerts, perform root cause analysis, and lead remediation efforts for security incidents.
• Partner with Platform Engineering to secure cloud infrastructure and remediate Infrastructure-as-Code (IaC) misconfigurations.
• Deploy and maintain the security stack, including EDR (Endpoint Detection and Response), WAFs, and Zero Trust gateways

• What we’re looking for2 - 4 years of experience across multiple security domains
• Experience in engineering cyber security tools like SIEM/SOAR, EDR, firewalls, intrusion detection systems.
• Experience working in AWS.
• Security frameworks and methodologies - OWASP Top 10, MITRE ATT&CK, Cyber Kill Chain, etc
• Strong background in cyber security, with a strong understanding of cyber security principles.
• Proficient in scripting languages to automate SOC processes.
• Communication - we do a lot of communicating and strong written and verbal communication will be important
• Empathy - we’re a service provider, so having high empathy for our internal stakeholders is a big deal
• Passion for learning - we take learning and growth seriously and you’ll need to be down with that

• What you’ll doBuild and tune detection logic within the SIEM using "Detection-as-Code" principles. Automate incident response playbooks via SOAR to reduce manual toil.
• Act as a technical escalation point for the SOC. Investigate security alerts, perform root cause analysis, and lead remediation efforts for security incidents.
• Partner with Platform Engineering to secure cloud infrastructure and remediate Infrastructure-as-Code (IaC) misconfigurations.
• Deploy and maintain the security stack, including EDR (Endpoint Detection and Response), WAFs, and Zero Trust gateways