Threat Management – Application Monitoring & Response

Decipher Bureau; Sydney; On-site; AUD 150,000 - 200,000; Full time

Benefits offered by this job

4-day work week

Sydney CBD office

Job summary

Decipher Bureau is recruiting in Sydney for senior security roles in a global, follow-the-sun application defence team. You’ll guard web apps, write and tune WAF signatures, and collaborate with a multinational team across time zones.

The two levels offered are Senior Specialist (AVP, 5–8 years) and Lead Specialist (VP, 10+ years), with a 4-day work week and a Sydney CBD office base. First hire in this team locally, with a clear growth path.

Qualifications

• Hands-on experience in application security detection and response.
• Deep understanding of web apps, HTTP/S, and OWASP Top 10.
• Advanced log analysis across server, app, auth, and traffic logs.
• Experience maintaining and tuning WAF signatures on leading platforms.
• Comfort with scripting and regular expressions.
• Ability to work independently in a fast-paced environment.

Responsibilities

• Analyse application layer alerts and investigate attacks on the bank's web apps.
• Dig into logs to reconstruct incidents and disrupt threat actors.
• Write, maintain and fine-tune WAF signatures on F5 ASM and Akamai.
• Build custom alerts and dashboards based on layer 7 indicators.
• Use threat intelligence to update controls and design new defenses.
• Collaborate with senior leaders and mentor junior team members.
• Support audit, compliance and risk requirements with processes.

Skills

Application security detection

OWASP Top 10

Log analysis

WAF tuning

Scripting/Regex

Cross-functional collaboration

Independent worker

Threat monitoring

Network packet analysis

Certifications (SANS/GIAC/CISSP)

Education

Certifications (SANS/GIAC/CISSP)

Relevant security certs

Tools

Splunk

SIEM

F5 ASM

Akamai

Wireshark

Job description

Defend a global bank's web apps. Dig into logs to find attacks, then write and tune the WAF signatures that stop them. AVP or VP level.

• First Sydney hire in a global follow-the-sun application defence team
• 4-day week: 9:00am to 7:30pm, Wed to Sat OR Sun to Wed
• Permanent | Sydney CBD | $150K to $200K + super + bonus

One of the world’s largest banks is building its application threat management team (Application Monitoring & Response) in Sydney, and this is the first seat here.

It’s a front-line application security detection and response team. They watch the bank’s web applications, investigate attacks at the application layer, and write and tune the WAF signatures that stop them. You’ll report to a hiring manager in Singapore and work closely with the 7-person team there, as part of a follow-the-sun model across Australia, Singapore, the UK and the US.

The role is offered at two levels depending on experience: Senior Specialist (AVP, 5 to 8 years) or Lead Specialist (VP, 10+ years). You’ll have real ownership and the chance to shape how the team grows in Sydney.

What's on offer

• Senior Specialist (AVP, 5 to 8 years): $150K to $170K + super + discretionary bonus
• Lead Specialist (VP, 10+ years): $175K to $200K + super + discretionary bonus
• 4-day week, three days off. Choose Wed to Sat or Sun to Wed (9:00am to 7:30pm). In the office for the first 6 months, then one weekday from home each week
• The backing of a global bank, with the chance to build something new in a Sydney CBD office alongside around 40 people in the Sydney cyber team
• First hire in this team locally, with exposure to a global defence program and threats that are very current
• No preference on industry background. The team likes a mix
• A simple interview process: Technical, culture, then an in-person final.

What you'll be doing

• Analyse application layer alerts, investigate attacks against the bank's web applications, and act to disrupt threat actors
• Dig into server, application, authentication and traffic logs to piece together what happened
• Write, maintain and fine-tune WAF signatures (F5 ASM, Akamai and similar)
• Build custom alerts and dashboards based on layer 7 attack and threat indicators
• Use new threat intelligence to update existing controls and help design, test and deploy new ones
• Use packet and network analysis tools to support investigations
• Work with senior business leaders to triage security events and report on impact
• Mentor and develop less experienced team members
• Support audit, compliance and risk requirements through processes and controls

What you'll bring

Must-have:

• Strong hands-on experience in application security detection and response (this role is web and application focused, not endpoint)
• Solid understanding of web applications (HTTP/HTTPS), common attack methods and the OWASP Top 10
• Advanced log analysis skills across server, application, authentication and traffic logs, using Splunk or another SIEM
• Experience maintaining and tuning WAF signatures on leading platforms (e.g. F5 ASM, Akamai)
• Comfortable with scripting and regular expressions
• Working knowledge of Windows, Linux and macOS
• Clear verbal and written communication, adjusted for technical and business audiences
• Able to work independently in a fast-paced environment and drive improvement
• Akamai or other CDN experience
• Packet capture and analysis (e.g. Wireshark)
• Certifications such as SANS/GIAC or CISSP

About Decipher Bureau

Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description.

We take the time to understand both the technical requirements of a role and the team environment, so every introduction we make is a considered one.