Lead AppSec Detection & Response (4-Day Week)

Decipher Bureau; Sydney; On-site; AUD 150,000 - 200,000; Full time

Benefits offered by this job

4-day work week

Sydney CBD office

Discretionary bonus

Job summary

Global Bank Australia is expanding its application threat management team in Sydney. The role is frontline in application security detection and response, watching web apps, investigating attacks, and tuning WAF signatures. You will join a global team across AU, SG, UK and US in a follow-the-sun setup.

The role offers two levels: Senior Specialist (AVP, 5–8 years) and Lead Specialist (VP, 10+ years). First Sydney hire with exposure to a global defence program and modern security operations.

Qualifications

• Web and application security focus (not endpoint).
• Experience maintaining and tuning WAF signatures on leading platforms (F5 ASM, Akamai).
• Advanced log analysis across server and application logs, using SIEM like Splunk.

Responsibilities

• Analyse application layer alerts and investigate attacks on web apps; disrupt threat actors.
• Correlate server, application, authentication, and traffic logs to reconstruct incidents.
• Write, maintain and tune WAF signatures for relevant platforms.
• Build alerts and dashboards based on layer 7 attack indicators; triage security events.
• Support audit, compliance and risk processes through defined controls.

Skills

Application security

Detection & response

WAF tuning

Log analysis

SIEM (Splunk)

Tools

F5 ASM

Akamai

Splunk

Wireshark

Job description

Global Bank Australia is expanding its application threat management team in Sydney. The role is frontline in application security detection and response, watching web apps, investigating attacks, and tuning WAF signatures. You will join a global team across AU, SG, UK and US in a follow-the-sun setup.

The role offers two levels: Senior Specialist (AVP, 5–8 years) and Lead Specialist (VP, 10+ years). First Sydney hire with exposure to a global defence program and modern security operations.