Job Description
Ovii's Interpretation of the Role
ElevenLabs seeks a Detection Engineer in APAC to design, tune, and operate security detection and response capabilities. The role blends SIEM management, cloud security monitoring, and automation to protect the company’s AI platforms.
Role Snapshot
- Build and tune security detection rules
- Lead incident response investigations
- Automate detection and response workflows
- Manage Google Chronicle SIEM platform
- Monitor SaaS and cloud environments
- Apply threat‑intelligence frameworks
- Develop security dashboards
Must-Have Requirements
- Incident response
- Detection engineering
- Google Chronicle SIEM
- Security monitoring platforms (JAMF MDM, Google Workspace, Okta)
- Cloud security (GCP, Security Command Center)
- Python scripting
- Bash scripting
- MITRE ATT&CK framework
- NIST Cybersecurity Framework
- incident response
- detection engineering
- SIEM management
- cloud security monitoring
- scripting automation
Work Setup
- Location: Australia
- Work mode: REMOTE
- Remote scope: COUNTRY_RESTRICTED
- Remote countries: Singapore, Australia, Philippines
- Timezone: GMT+10
- Employment type: Full-Time
Not Specified in JD
- Salary range
- Visa sponsorship
- Security clearance
- Coding test
- Portfolio
- GitHub
- Writing sample
- Cover letter
What You'll Likely Work On
- Triaging alerts, investigating incidents, and coordinating response actions
- Creating, tuning, and maintaining detection rules across SIEM and cloud services
- Onboarding and parsing data in Google Chronicle, building dashboards for visibility
- Monitoring macOS endpoints, Google Workspace, Okta, and other SaaS applications
- Automating repetitive security tasks with Python or Bash scripts
- Translating MITRE ATT&CK and NIST guidance into actionable detections
- Collaborating with APAC teams to ensure coverage in GMT+10 timezones
Good Fit If You Have
- Experience working in APAC timezones (GMT+10)
- Interest in AI‑driven security automation
- Strong analytical and problem‑solving abilities
Skills
- Google Chronicle SIEM
- Security monitoring platforms (JAMF MDM, Google Workspace, Okta)
- Cloud security (GCP, Security Command Center)
- Scripting (Python, Bash)
- Threat frameworks (MITRE ATT&CK, NIST)
- Incident response
- Detection engineering
- Automation mindset
Remote Eligibility
- Australia
- Singapore
- Philippines