Senior Security Engineer - Digital Forensics & Incident Response, remote across ANZ

Join the team redefining how the world experiences design.

Hey, hello, hiya, g'day, mabuhay, kia ora, 你好, hallo, vítejte!

Thanks for stopping by. We know job hunting can be a little time consuming and you're probably keen to find out what's on offer, so we'll get straight to the point.

Where and how you can work

Our flagship campus is in Sydney. We also have a campus in Melbourne and co-working spaces in Brisbane, Perth and Adelaide. But you have choice in where and how you work. That means if you want to do your thing in the office (if you're near one), at home or a bit of both, it's up to you.



What you’d be doing in this role

As Canva scales change continues to be part of our DNA. But we like to think that's all part of the fun. So this will give you the flavour of the type of things you'll be working on when you start, but this will likely evolve.

We are seeking an experienced DFIR practitioner to join the team as a Senior Security Engineer. In addition to hands-on incident response and forensic investigation, you will play a pivotal role in shaping the future of Canva’s DFIR capability. You’ll bring deep technical investigation experience, strong incident coordination skills, and a mindset focused on building scalable, repeatable response practices. You’ll also help foster a culture where we work with empathy, humility, and generosity - especially when the pressure is on.



At the moment, this role is focused on

• Acting as a senior escalation point and incident coordinator for security incidents across Canva’s cloud, endpoint, and SaaS environments.
• Leading and actively participating in security incident response, from initial detection through investigation, containment, eradication, and recovery.
• Performing deep forensic analysis to determine scope, impact, and root cause, and translating technical findings into clear outcomes for stakeholders.
• Partnering with Detection, Platform, and Engineering teams to ensure incidents are understood end-to-end and that lessons learned drive durable security improvements.
• Contributing to DFIR tooling requirements, workflows, and automation to reduce responder toil and improve investigation speed and consistency.
• Maintaining and evolving incident response documentation, playbooks, and forensic procedures, and contributing to high-quality incident reports and post-incident reviews.
• Proactively running threat-hunting and investigation exercises to identify anomalous or suspicious behaviour before it escalates into incidents.
• Contributing to the growth and capability of the DFIR team through mentorship, technical guidance, and knowledge sharing.
• Participating in the on-call roster for security incident response and operating effectively during high-severity incidents.
• Staying current on emerging threat techniques, attacker tradecraft, and DFIR technologies, and assessing their relevance to Canva’s environment.

You’re probably a match if

• You have strong experience leading and coordinating complex security incident investigations in modern cloud-native environments.
• You’re comfortable performing deep technical investigations and forensic analysis across endpoints, cloud infrastructure, and SaaS platforms.
• You enjoy building and improving security tooling, automation, and response workflows — not just using what already exists.
• You think in systems and feedback loops, and care about turning incidents into long-term improvements rather than one-off fixes.
• You enjoy mentoring others, sharing knowledge, and helping raise the bar for how incident response is practiced.
• You communicate clearly and calmly under pressure and work effectively with cross-functional partners during incidents.
• You bring empathy, humility, and generosity to how you work — especially when things don’t go to plan.

About the team

DFIR (Digital Forensics & Incident Response) supports Detection & Response’s mission to prevent, detect, and respond to cyber attacks against Canva, Canvanauts, and Canva users. We operate across the full incident lifecycle — from investigation and containment through to recovery and learning — and engage in both proactive and reactive activities to improve Canva’s security resilience over time.



As part of the Security Group, Detection & Response is responsible for protecting Canva’s systems and data from information security threats. Our teams work closely together — and with the broader business — to deliver preventative, detective, and responsive controls that reduce security risk at scale.

What's in it for you?

Achieving our crazy big goals motivates us to work hard - and we do - but you'll experience lots of moments of magic, connectivity and fun woven throughout life at Canva, too. We also offer a stack of benefits to set you up for every success in and outside of work.

Here's a taste of what's on offer:

• Equity packages - we want our success to be yours too

• Inclusive parental leave policy that supports all parents & carers

• An annual Vibe & Thrive allowance to support your wellbeing, social connection, office setup & more

• Flexible leave options that empower you to be a force for good, take time to recharge and supports you personally

Check out lifeatcanva.com for more info.

Other stuff to know

We see AI as a powerful amplifier of creativity and technology at Canva. We’re evolving how we assess AI skills in our Technology hiring experience - you’ll tackle interactive, real-time challenges that reflect the kind of work we do. In some interviews, you may also be asked to solve a problem using an AI tool to show how you approach challenges with tech by your side. Your recruitment partner will walk you through what to expect.

We make hiring decisions based on your experience, skills and passion, as well as how you can enhance Canva and our culture. When you apply, please tell us the pronouns you use and any reasonable adjustments you may need during the interview process.

Please note that interviews are conducted virtually.