Cyber Defence & Incident Response Specialist
Incident Response | Threat Detection | SOC | Web & API Security | AWS / GCP
Sydney | Permanent
We are partnering with a leading Australian bank to appoint an Incident Response Specialist to join its cyber defence function.
This is a hands-on role focused on investigating and responding to advanced cyber threats, coordinating remediation across technology and security teams, and helping strengthen detection and response capability across customer-facing banking services.
You will work across Security Operations, Fraud, Cloud, Applications, Infrastructure and broader Technology teams, while also supporting a 24/7 SOC through a rotational on-call schedule.
What you'll be responsible for
Investigate and respond to complex cyber security incidents
Coordinate containment, remediation and recovery across multiple technology teams
Lead incident activity involving phishing, credential compromise, account takeover and fraud-related threats
Support major incident response and escalation
Threat Detection & Security Operations
Analyse attack trends, threat activity and emerging risks
Investigate alerts and suspicious behaviour across enterprise environments
Improve detection logic, monitoring and proactive security controls
Work closely with SOC, Threat Intelligence and Engineering teams
Support a rotational on-call model
Web & API Security




Investigate security incidents involving web applications and APIs
Apply knowledge of common application vulnerabilities and the OWASP Top 10
Support remediation of vulnerabilities affecting customer-facing digital services
Work with application and engineering teams to reduce recurring security risks
Hands-on experience across technologies such as:
AWS and Google Cloud Platform
Splunk
Google SecOps / Chronicle
Sumo Logic CloudSIEM or similar SIEM platforms
Cloud security and threat detection tooling
What we're looking for
Around 5 years' experience across security operations, incident response or cyber defence
Experience working within a large enterprise environment
Strong hands-on incident investigation capability
Experience coordinating remediation across multiple teams
Knowledge of web application and API security
Experience with phishing, fraud, credential compromise or account takeover incidents
Banking or financial services experience would be highly regarded
Solid communication and stakeholder management skills
Why consider this opportunity?
This is an opportunity to move beyond traditional SOC monitoring into a role with ownership of cyber incidents, working across threat detection, incident response, cloud, web security and fraud-related cyber activity within a complex banking environment.
#J-*****-Ljbffr

📌 Incident Management Specialist (New South Wales)
🏢 JS Careers Pty
📍 New South Wales