Senior Threat Management & Incident Response Lead, InfoSec

Bank of America; Sydney; On-site; AUD 140,000 - 210,000; Full time

Job summary

Bank of America in Sydney seeks a senior security professional to lead application security detection and incident response. You will work with a global GIS/CSD team to protect critical systems and data, develop custom alerts, and mentor junior staff.

The role requires strong SIEM skills, WAF tuning, and excellent communication in a fast-paced environment with follow-the-sun coverage across regions.

Qualifications

• Strong hands-on experience in application security detection and response.
• Knowledge of exploits, web application attacks, network protocols and logs (eg weblogs, AD logs, security logs).
• Proficient in log analysis with Splunk or other SIEM solutions.
• Experience maintaining/tuning signatures on leading WAFs (FE ASM, Akamai).
• Scripting ability and regex proficiency.
• Working knowledge of Windows/Linux/macOS.
• Desirable: packet captures (Wireshark).
• Excellent communication skills, able to explain security concepts to non-technical audiences.
• Certifications such as SANS, CISSP are desirable.

Responsibilities

• Analyze application layer alerts and investigate incidents.
• Develop and refine alerts and dashboards for OSI layer 7 threats.
• Mentor junior team members and share knowledge across teams.
• Collaborate with business units to triage security events and report impacts.
• Drive risk-based improvements to controls and incident response processes.
• Support audits and compliance with security requirements.
• Engage in threat intelligence and deploy new controls.

Skills

Application security

Threat detection

Incident response

SIEM (Splunk)

WAF tuning

Scripting

OS knowledge

Wireshark

Certifications

Communication

Tools

Splunk

FE ASM

Akamai

Wireshark

Job description

Bank of America in Sydney seeks a senior security professional to lead application security detection and incident response. You will work with a global GIS/CSD team to protect critical systems and data, develop custom alerts, and mentor junior staff.

The role requires strong SIEM skills, WAF tuning, and excellent communication in a fast-paced environment with follow-the-sun coverage across regions.