Application Security detection & Response Specialist (AVP/VP)

Decipher Bureau; Sydney; On-site; AUD 150,000 - 200,000; Full time

Benefits offered by this job

4-day work week

Sydney CBD office

Discretionary bonus

Job summary

Global Bank Australia is expanding its application threat management team in Sydney. The role is frontline in application security detection and response, watching web apps, investigating attacks, and tuning WAF signatures. You will join a global team across AU, SG, UK and US in a follow-the-sun setup.

The role offers two levels: Senior Specialist (AVP, 5–8 years) and Lead Specialist (VP, 10+ years). First Sydney hire with exposure to a global defence program and modern security operations.

Qualifications

• Web and application security focus (not endpoint).
• Experience maintaining and tuning WAF signatures on leading platforms (F5 ASM, Akamai).
• Advanced log analysis across server and application logs, using SIEM like Splunk.

Responsibilities

• Analyse application layer alerts and investigate attacks on web apps; disrupt threat actors.
• Correlate server, application, authentication, and traffic logs to reconstruct incidents.
• Write, maintain and tune WAF signatures for relevant platforms.
• Build alerts and dashboards based on layer 7 attack indicators; triage security events.
• Support audit, compliance and risk processes through defined controls.

Skills

Application security

Detection & response

WAF tuning

Log analysis

SIEM (Splunk)

Tools

F5 ASM

Akamai

Splunk

Wireshark

Job description

Application Security detection & Response Specialist (AVP/VP)

One of the world's largest banks is building its application threat management team (Application Monitoring & Response) in Sydney, and this is the first seat here.

It's a front-line application security detection and response team. They watch the bank's web applications, investigate attacks at the application layer, and write and tune the WAF signatures that stop them. You'll report to a hiring manager in Singapore and work closely with the 7-person team there, as part of a follow-the-sun model across Australia, Singapore, the UK and the US.

The role is offered at two levels depending on experience: Senior Specialist (AVP, 5 to 8 years) or Lead Specialist (VP, 10+ years). You'll have real ownership and the chance to shape how the team grows in Sydney.

What's on offer

• Senior Specialist (AVP, 5 to 8 years): $150K to $170K + super + discretionary bonus
• Lead Specialist (VP, 10+ years): $175K to $200K + super + discretionary bonus
• 4-day week, three days off. Choose Wed to Sat or Sun to Wed (9:00am to 7:30pm). In the office for the first 6 months, then one weekday from home each week
• The backing of a global bank, with the chance to build something new in a Sydney CBD office alongside around 40 people in the Sydney cyber team
• First hire in this team locally, with exposure to a global defence program and threats that are very current
• No preference on industry background. The team likes a mix
• A simple interview process: Technical, culture, then an in-person final.

What you'll be doing

• Analyse application layer alerts, investigate attacks against the bank's web applications, and act to disrupt threat actors
• Dig into server, application, authentication and traffic logs to piece together what happened
• Write, maintain and fine-tune WAF signatures (F5 ASM, Akamai and similar)
• Build custom alerts and dashboards based on layer 7 attack and threat indicators
• Use new threat intelligence to update existing controls and help design, test and deploy new ones
• Use packet and network analysis tools to support investigations
• Work with senior business leaders to triage security events and report on impact
• Mentor and develop less experienced team members
• Support audit, compliance and risk requirements through processes and controls

What you'll bring

• Strong hands-on experience in application security detection and response (this role is web and application focused, not endpoint)
• Solid understanding of web applications (HTTP/HTTPS), common attack methods and the OWASP Top 10
• Advanced log analysis skills across server, application, authentication and traffic logs, using Splunk or another SIEM
• Experience maintaining and tuning WAF signatures on leading platforms (e.g. F5 ASM, Akamai)
• Comfortable with scripting and regular expressions
• Working knowledge of Windows, Linux and macOS
• Clear verbal and written communication, adjusted for technical and business audiences
• Able to work independently in a fast-paced environment and drive improvement

Desirable

• Splunk experience
• Akamai or other CDN experience
• Packet capture and analysis (e.g. Wireshark)
• Certifications such as SANS/GIAC or CISSP

Additional information

• First Sydney hire in a global follow-the-sun application defence team
• 4-day week: 9:00am to 7:30pm, Wed to Sat OR Sun to Wed
• Permanent | Sydney CBD | $150K to $200K + super + bonus