Senior Security Engineer Digital Forensics & Incident Response, remote across ANZ

Join the team redefining how the world experiences design.

Hey hello hiya gday mabuhay kia ora 你好 hallo vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and youre probably keen to find out whats on offer so well get straight to the point.

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane Perth and Adelaide. But you have choice in where and how you work. That means if you want to do your thing in the office (if youre near one) at home or a bit of both its up to you.

What youd be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think thats all part of the fun. So this will give you the flavour of the type of things youll be working on when you start but this will likely evolve.

We are seeking an experienced DFIR practitioner to join the team as a Senior Security addition to hands-on incident response and forensic investigation you will play a pivotal role in shaping the future of Canvas DFIR capability. Youll bring deep technical investigation experience strong incident coordination skills and a mindset focused on building scalable repeatable response practices. Youll also help foster a culture where we work with empathy humility and generosity - especially when the pressure is on.

At the moment this role is focused on

• Acting as a senior escalation point and incident coordinator for security incidents across Canvas cloud endpoint and SaaS environments.
• Leading and actively participating in security incident response from initial detection through investigation containment eradication and recovery.
• Performing deep forensic analysis to determine scope impact and root cause and translating technical findings into clear outcomes for stakeholders.
• Partnering with Detection Platform and Engineering teams to ensure incidents are understood end-to-end and that lessons learned drive durable security improvements.
• Contributing to DFIR tooling requirements workflows and automation to reduce responder toil and improve investigation speed and consistency.
• Maintaining and evolving incident response documentation playbooks and forensic procedures and contributing to high-quality incident reports and post-incident reviews.
• Proactively running threat-hunting and investigation exercises to identify anomalous or suspicious behaviour before it escalates into incidents.
• Contributing to the growth and capability of the DFIR team through mentorship technical guidance and knowledge sharing.
• Participating in the on-call roster for security incident response and operating effectively during high-severity incidents.
• Staying current on emerging threat techniques attacker tradecraft and DFIR technologies and assessing their relevance to Canvas environment.

Youre probably a match if

• You have strong experience leading and coordinating complex security incident investigations in modern cloud-native environments.
• Youre comfortable performing deep technical investigations and forensic analysis across endpoints cloud infrastructure and SaaS platforms.
• You enjoy building and improving security tooling automation and response workflows not just using what already exists.
• You think in systems and feedback loops and care about turning incidents into long-term improvements rather than one-off fixes.
• You enjoy mentoring others sharing knowledge and helping raise the bar for how incident response is practiced.
• You communicate clearly and calmly under pressure and work effectively with cross-functional partners during incidents.
• You bring empathy humility and generosity to how you work especially when things dont go to plan.

About the team

DFIR (Digital Forensics & Incident Response) supports Detection & Responses mission to prevent detect and respond to cyber attacks against Canva Canvanauts and Canva users. We operate across the full incident lifecycle from investigation and containment through to recovery and learning and engage in both proactive and reactive activities to improve Canvas security resilience over time.

As part of the Security Group Detection & Response is responsible for protecting Canvas systems and data from information security threats. Our teams work closely together and with the broader business to deliver preventative detective and responsive controls that reduce security risk at scale.

Whats in it for you

Achieving our crazy big goals motivates us to work hard - and we do - but youll experience lots of moments of magic connectivity and fun woven throughout life at Canva too. We also offer a stack of benefits to set you up for every success in and outside of work.

Heres a taste of whats on offer:

• Equity packages - we want our success to be yours too

• Inclusive parental leave policy that supports all parents & carers

• An annual Vibe & Thrive allowance to support your wellbeing social connection office setup & more

• Flexible leave options that empower you to be a force for good take time to recharge and supports you personally

Check out for more info.

Other stuff to know

We see AI as a powerful amplifier of creativity and technology at Canva. Were evolving how we assess AI skills in our Technology hiring experience - youll tackle interactive real-time challenges that reflect the kind of work we some interviews you may also be asked to solve a problem using an AI tool to show how you approach challenges with tech by your side. Your recruitment partner will walk you through what to expect.

We make hiring decisions based on your experience skills and passion as well as how you can enhance Canva and our culture. When you apply please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

Please note that interviews are conducted virtually.

Remote Work :

Yes

Employment Type :

Full-time