Closing date: Friday 4 September 2026

We’ve never been ‘just a bank’. Just like you should never be ‘just an employee’. We’re united in our belief that in banking, better can be bigger, and together we’re making it happen.

It starts here. With Bendigo Bank… and you.

About the opportunity

The technology space is evolving, and so are we. At Bendigo Bank we are simplifying our technology function, creating clearer accountabilities aligned with our strategy and customer needs. With a focus on delivering innovative services at scale, we’re creating a future-ready customer experience and high performing culture.

As the Senior Engineer – Cyber Fusion Centre Team, you will be at the forefront of driving our incident response, detection capabilities, and security automation. This high-impact role sits at the critical core of our Cyber Fusion Centre—a dynamic environment that combines cyber threat intelligence with proactive threat defence operations into a single, integrated security entity. Operating within this collaborative space, you will leverage a solid foundation in up-to-date detection engineering, orchestration, and continuous operational improvement to safeguard our digital assets.

In this role you’ll get to…

- Lead Cyber Fusion Centre operations by acting as a technical escalation point for complex security incidents, coordinating containment efforts, and performing deep-dive forensic investigations.
- Engineer high-fidelity detections by designing, building, and tuning robust detection rules and analytics within our SIEM/SOAR platforms (using Yara, Yara-L, KQL) to catch emerging threats.
- Pioneer AI-driven SecOps by exploring and integrating agentic workflows and Generative AI technologies into our cyber defence operations, augmenting our analysts with automated threat summarisation, complex alert triage, and adaptive response capabilities.
- Automate security workflows by developing and implementing SOAR playbooks, custom scripts,



and automation integrations to eliminate manual triage overhead and speed up mean time to respond (MTTR).
- Elevate Security Operations capabilities by designing and executing scenario-based tabletop exercises, refining incident response playbooks, and mentoring team members on advanced analysis techniques.
- Uncover hidden threats by proactively executing hypothesis-driven threat hunting campaigns across our hybrid enterprise and cloud environments.
- Refine operational workflows by continuously analysing incident post-mortems to identify and bridge gaps in our current visibility, alerting pipelines, and tooling.
- Collaborate on platform engineering by partnering closely with the Cyber Platforms team to design, tune, and optimise the enterprise security toolset supporting our CFC operations.

What you’ll bring to the role

To be successful in the role you will have:

- Expertise in Incident Response with extensive hands-on experience handling complex security incidents, security investigations, root-cause analysis, and host/network forensics.
- Strong background in Detection Engineering, including a deep understanding of the threat landscape, mapping detections to frameworks like MITRE ATT&CK;, and writing advanced queries (e.g., SPL, KQL, YARA-L).
- Demonstrated experience in Security Automation (SOAR), with the ability to write custom scripts (e.g., Python, PowerShell) and build automated API-driven workflows to orchestrate response actions.
- A continuous improvement mindset with a track record of building and optimising SecOps playbooks, standard operating procedures (SOPs), and operational metrics.
- Excellent communication and coordination skills,



with the ability to lead technical response efforts under pressure and translate complex technical findings into clear, actionable incident reports.

Additionally, exposure to or familiarity with the following will be highly regarded:

- AI & Agentic Engineering: Exposure to leveraging Generative AI models, writing advanced prompts, or developing agentic workflows to solve security operations use-cases and streamline analyst tasks.
- Cloud Security: Foundational experience navigating and securing expansive multi-cloud footprints across AWS, Azure, and GCP.
- Threat Intelligence: Familiarity with operationalising Threat Intelligence Platforms (TIP) to enrich detection and response pipelines.
- Insider Threat: Exposure to, or an interest in contributing to, the design and development of an insider threat program.

This is a permanent, full-time opportunity, located at our Melbourne or Bendigo Head Office locations.

We offer flexible work options that put our people first, working in a hybrid mode with a minimum local Head Office attendance requirement determined by your Leader, to find a rhythm that works best for you and your team. We believe that coming into the office some of the time is the best way to learn, stay connected and collaborate effectively, especially for key activities like team days, 1:1s, and town halls.

We believe a diverse workforce supported by an inclusive culture is central to our success and we actively encourage applications from those who bring diversity of thought to our business. We support candidate requests for adjustment to accommodate an illness, injury, or disability to equitably participate in the selection process.

Still in two minds?

Research suggests 60% of women and underrepresented groups might stop here, even after getting as far as drafting an application. We believe that diversity makes every team stronger, so even if you don’t tick every box we still want to see your application!

📌 Senior Engineer - Cyber Fusion Centre (Melbourne)
🏢 Bendigo Bank
📍 Melbourne