Job Description

We’re working with a global organisation looking for someone to investigate attacks against its web applications. You’ll analyse application, server, authentication and traffic logs, piece together what happened and help the team respond. You’ll also write and fine-tune Web Application Firewall (WAF) rules to improve protection.

Robust log analysis is the main thing. You’ll need to understand know how web applications work and recognise common attack methods and vulnerabilities, including the OWASP Top 10. Experience writing and tuning WAF rules is also significant. Splunk and Akamai/CDN experience would be helpful.

You’ll need experience investigating application attacks beyond working with endpoint tools such as Microsoft Defender.

The role works four days a week, either Wednesday to Saturday or Sunday to Wednesday, from 9:00am to 7:30pm AEST. You can be considered for either or both options, but once agreed, your roster stays the same each week.

📌 Threat Management, Application Monitoring & Response Sydney (Australia)
🏢 The Onset
📍 Australia