Primary Details
Time Type: Full timeWorker Type: Employee
Location: Parramatta/Sydney
Type: Permanent, full-time position
Hybrid role, Happy to talk flexible working
The opportunity
Reporting to CDC Manager, Incident Response Specialist will be a key member of our rapidly growing Cyber Defence Centre. This is an exciting hands-on technical role in which the specialist will use their security skills and knowledge to perform advanced analysis on the collection of cyber threats using high-level proactive and reactive threat hunting methods, classifying, analysing, prioritising and remediating security alerts/events. The focus is to provide effective, proactive and a highly technical analytical response to cyber security-related incidents to prevent QBE from becoming compromised by contemporary attack methods and techniques.
About QBE
At QBE, we get to the heart of what matters for our customers. And we do it all with a human touch.
We're an international insurer with more than 13,000 people working across 26 countries - which means we're big enough for your ambitions, yet small enough for you to make a real impact. It's an exciting time. We're building momentum towards our vision to become the most consistent and innovative risk partner.
What if you could have a positive impact - at work and in the world? As part of the QBE team, you'll get to spend every day working with people who are passionate, talented and kind.
Your new role
In this role, you will take the lead during complex cybersecurity incidents, providing clear direction, maintaining control of the response, and ensuring all actions are aligned to the Global Incident Management Plan. You'll also play a critical role in validating investigations, driving threat-led activities, and strengthening the CDC's overall operational effectiveness.
Key responsibilities include
Lead and coordinate responses to high and critical severity cybersecurity incidents,



ensuring structured execution across technical and business stakeholders
Act as the primary escalation point during complex investigations, maintaining oversight of decisions, risks, and containment actions
Provide validation and assurance of Tier 2 investigations, including scope of compromise, lateral movement analysis, and containment effectiveness
Drive threat-led response activities, including targeted threat hunting based on credible intelligence and observed adversary behaviours
Translate threat intelligence into operational outcomes such as detection improvements, escalation guidance, and incident criteria enhancements
Lead or contribute to post-incident reviews, ensuring lessons learned are embedded into playbooks, detection logic, and operational processes
About You
You are a technically strong cybersecurity professional with a passion for incident response and threat analysis. You bring a proactive, analytical mindset and are confident operating in high-pressure environments, with the ability to communicate clearly across both technical and non-technical stakeholders.
Key Requirements
Proven experience in Security Operations, Incident Response, or a related cybersecurity function
Strong experience investigating and responding to cybersecurity incidents in enterprise environments
Ability to lead or coordinate technical response activities during complex incidents
Solid understanding of modern attacker tactics, techniques, and threat landscapes
Experience with threat hunting, threat intelligence, and detection improvement practices
Tertiary qualification in Cybersecurity, IT, or equivalent industry experience
Benefits
We offer a range of benefits to help provide holistic support for your work life, whatever your circumstances. As a QBE employee you will have access to and benefit from:
'Hybrid Working' - a mix of working from home and in the office to enhance your work/life balance
Free holistic wellbeing coaching,
#J-*****-Ljbffr

📌 Incident Response Specialist (Sydney)
🏢 Qbe Insurance
📍 Sydney