Cyber Security Analyst – Web Application Defence

The Onset; Sydney; On-site; AUD 90,000 - 130,000; Part time

Job summary

The Onset is seeking a Cyber Security Analyst to defend our web applications. You’ll investigate attacks against web apps, analyse application, server and traffic logs, piece together what happened and help the team respond.

You’ll write and fine-tune Web Application Firewall (WAF) rules to improve protection, and apply OWASP Top 10 knowledge. Strong log analysis, HTTP/HTTPS understanding, and experience with Splunk and Akamai/CDN are highly valued.

Qualifications

• Experience analyzing web application attacks.
• Knowledge of web app architecture and vulnerabilities.
• Experience tuning and writing WAF rules.

Responsibilities

• Investigate attacks against web applications and logs.
• Analyse application, server, authentication and traffic logs.
• Write and tune WAF rules to improve protection.
• Collaborate with incident response and engineering teams.

Skills

Log analysis

Web app security

OWASP Top 10

WAF tuning

HTTP/HTTPS understanding

Tools

Splunk

Akamai CDN

Job description

Cyber Security Analyst – Web Application Defence

We’re working with a global organisation looking for someone to investigate attacks against its web applications. You’ll analyse application, server, authentication and traffic logs, piece together what happened and help the team respond. You’ll also write and fine-tune Web Application Firewall (WAF) rules to improve protection.

Strong log analysis is the main thing. You’ll need to understand HTTP/HTTPS, know how web applications work and recognise common attack methods and vulnerabilities, including the OWASP Top 10. Experience writing and tuning WAF rules is also important. Splunk and Akamai/CDN experience would be useful.

You’ll need experience investigating application attacks beyond working with endpoint tools such as Microsoft Defender.

The role works four days a week, either Wednesday to Saturday or Sunday to Wednesday, from 9:00am to 7:30pm AEST. You can be considered for either or both options, but once agreed, your roster stays the same each week.