One of the world’s largest banks is building its application threat management team (Application Monitoring & Response) in Sydney, and this is the first seat here.

It’s a front-line application security detection and response team. They watch the bank’s web applications, investigate attacks at the application layer, and write and tune the WAF signatures that stop them. You’ll report to a hiring manager in Singapore and work closely with the 7-person team there, as part of a follow-the-sun model across Australia, Singapore, the UK and the US.

The role is offered at two levels depending on experience: Senior Specialist (AVP, 5 to 8 years) or Lead Specialist (VP, 10+ years). You’ll have real ownership and the chance to shape how the team grows in Sydney.

What's on offer

- Senior Specialist (AVP, 5 to 8 years): $150K to $170K + super + discretionary bonus
- Lead Specialist (VP, 10+ years): $175K to $200K + super + discretionary bonus
- 4-day week, three days off. Choose Wed to Sat or Sun to Wed (9:00am to 7:30pm). In the office for the first 6 months, then one weekday from home each week
- The backing of a global bank, with the chance to build something new in a Sydney CBD office alongside around 40 people in the Sydney cyber team
- First hire in this team locally, with exposure to a global defence program and threats that are very current
- No preference on industry background. The team likes a mix
- A simple interview process: Technical, culture, then an in-person final.

What you'll be doing

- Analyse application layer alerts, investigate attacks against the bank's web applications, and act to disrupt threat actors
- Dig into server, application, authentication and traffic logs to piece together what happened
- Write, maintain and fine-tune WAF signatures (F5 ASM, Akamai and similar)




- Build custom alerts and dashboards based on layer 7 attack and threat indicators
- Use recent threat intelligence to update existing controls and help design, test and deploy new ones
- Use packet and network analysis tools to support investigations
- Work with senior business leaders to triage security events and report on impact
- Mentor and develop less experienced team members
- Support audit, compliance and risk requirements through processes and controls

What you'll bring
Must-have:

- Strong hands-on experience in application security detection and response (this role is web and application focused, not endpoint)
- Solid understanding of web applications (HTTP/HTTPS), common attack methods and the OWASP Top 10
- Advanced log analysis skills across server, application, authentication and traffic logs, using Splunk or another SIEM
- Experience maintaining and tuning WAF signatures on leading platforms (e.g. F5 ASM, Akamai)
- Comfortable with scripting and regular expressions
- Working knowledge of Windows, Linux and macOS
- Clear verbal and written communication, adjusted for technical and business audiences
- Able to work independently in a fast-paced environment and drive improvement

Desirable:

- Splunk experience
- Akamai or other CDN experience
- Packet capture and analysis (e.g. Wireshark)
- Certifications such as SANS/GIAC or CISSP

About Decipher Bureau
Decipher Bureau is Australia's leading cyber security recruitment specialist, partnering with organisations across government, critical infrastructure and enterprise to find and secure exceptional talent. We don't just match skills to a job description.
We take the time to understand both the technical requirements of a role and the team environment, so every introduction we make is a considered one.

Interested?
Reach out for a confidential chat:

- Anthony Buccat, 0452 415 ***
- *******@decipherbureau.com

📌 Application Security detection & Response Specilaist (AVP/VP) (Sydney)
🏢 The Decipher Bureau
📍 Sydney