Principal Incident Response Analyst

Security | Sydney, Australia | Remote, Remote



At Atlassian, the Principal Incident Responser plays a critical role in maintaining the security and integrity of our data and environment. This position, based in Australia, is key to the team's planning and execution of work that advances our ability to handle incidents from initial triage to remediation. This involves developing and implementing incident response tools, systems, and playbooks, managing information security incidents, and delivering projects that advance our security posture. The ideal candidate has a vast background in different security domains, strong problem-solving abilities, and excellent communication skills. Within the Security Detection and Response team, we value teamwork, innovation, and dedication.

• Lead the region's security incident response, providing technical leadership during critical (Severity 0/1) incidents by driving complex investigations, cross-team coordination, and resolution.
• Manage all incident-related communications, providing clear status updates to executives, management, and key stakeholders such as Legal, Privacy, and Communications.
• Serve as the primary liaison with external bodies, including law enforcement, CERTs, and ISACs, during and after incidents.
• Coach and mentor team members in their day-to-day incident response activities.
• Own and deliver projects to advance the team's incident response capabilities, including building new tools, systems, and programs that uplift Atlassian's overall security posture.
• Enhance team readiness by creating and running regular training exercises and incident response drills.
• Conduct comprehensive post-incident reviews to identify root causes and drive improvements to the incident response process.
• Collaborate with other security teams to develop long-term strategies and plans to prevent future incidents.
• Produce and disseminate threat intelligence specific to Atlassian's products and infrastructure.
• Stay current with the latest security trends, threats, and technologies to ensure the team remains prepared for emerging risks.

• Bachelor's degree in Computer Science, Information Security, or a related field.
• At least 5 years of experience in security incident response, including leading high-severity incidents for enterprises and coordinating response efforts across multiple teams.
• Specialization in two or more of the following areas: Malware Analysis, Forensics, Threat Hunting, Network Analysis, or Cloud Endpoint Analysis.
• Strong technical foundation in security technologies (e.g., firewalls, IDS), cloud platforms (GCP), and network protocols.
• Experience building and maintaining security tools using a scripting or programming language (e.g., Python, Go).
• Expertise in creating and maintaining incident response playbooks.
• Excellent written and oral communication skills, with strong analytical abilities and the capacity to work effectively under high pressure.