Job Description

Cyber Defence & Incident Response Specialist

n

Incident Response | Threat Detection | SOC | Web & API Security | AWS / GCP

n

Sydney | Permanent

n

We are partnering with a leading Australian bank to appoint an Incident Response Specialist to join its cyber defence function.

n

This is a hands-on role focused on investigating and responding to advanced cyber threats, coordinating remediation across technology and security teams, and helping strengthen detection and response capability across customer-facing banking services.

n

You will work across Security Operations, Fraud, Cloud, Applications, Infrastructure and broader Technology teams, while also supporting a 24/7 SOC through a rotational on-call schedule.

What you'll be responsible for n

n
- Investigate and respond to complex cyber security incidents
n
- Coordinate containment, remediation and recovery across multiple technology teams
n
- Lead incident activity involving phishing, credential compromise, account takeover and fraud-related threats
n
- Support major incident response and escalation
n

Threat Detection & Security Operations nn
- Analyse attack trends, threat activity and emerging risks
n
- Investigate alerts and suspicious behaviour across enterprise environments
n
- Improve detection logic, monitoring and proactive security controls
n
- Work closely with SOC, Threat Intelligence and Engineering teams
n
- Support a rotational on-call model
n

Web & API Security nn




- Investigate security incidents involving web applications and APIs
n
- Apply knowledge of common application vulnerabilities and the OWASP Top 10
n
- Support remediation of vulnerabilities affecting customer-facing digital services
n
- Work with application and engineering teams to reduce recurring security risks
n

n

Hands-on experience across technologies such as:

n

n
- AWS and Google Cloud Platform
n
- Splunk
n
- Google SecOps / Chronicle
n
- Sumo Logic CloudSIEM or similar SIEM platforms
n
- Cloud security and threat detection tooling
n

What we're looking for nn
- Around 5 years' experience across security operations, incident response or cyber defence
n
- Experience working within a large enterprise environment
n
- Strong hands-on incident investigation capability
n
- Experience coordinating remediation across multiple teams
n
- Knowledge of web application and API security
n
- Experience with phishing, fraud, credential compromise or account takeover incidents
n
- Banking or financial services experience would be highly regarded
n
- Strong communication and stakeholder management skills
n

Why consider this opportunity? n

This is an opportunity to move beyond traditional SOC monitoring into a role with ownership of cyber incidents, working across threat detection, incident response, cloud, web security and fraud-related cyber activity within a complex banking workplace.

#J-18808-Ljbffr

📌 Incident Management Specialist (Sydney)
🏢 JS Careers Pty
📍 Sydney