Senior Security Analyst – Perimeter Posture Management

• We're on an exciting journey to safeguard a brighter future for all
• You are a seasoned cyber security professional with experience using cyber security solutions to defend organizations from external threat actors
• Together we will build tomorrow’s bank today, delivering exceptional customer outcomes, safely and securely. 

Do work that matters:
As the trusted partner of one in three Australians and a quarter of all businesses, our teams are focused on maximising the power of our technology and data sets to safely and securely offer customers a truly unique and personalised digital experience.
Whether you’re designing the apps people hold in their hands or the systems they’re delivered securely through, you’re determining how more than 17 million customers access their money.

Your work matters and by joining us, you can:

• Make an Impact at the Country’s Largest Bank: Play a crucial role in protecting a leading financial institution, helping secure millions of customers.
• Collaborate with Experts: Join a team that values your insights and supports your growth in cyber security.
• Dynamic, Rewarding Environment: Work in a fast-paced, results-oriented culture where your initiative and curiosity are celebrated. 

See yourself in our team:
As a Senior Security Analyst – Perimeter Posture Management within Group Security, you’ll help protect the bank’s digital perimeter, supporting monitoring, analysis, remediation, and improvement initiatives to keep us one step ahead of security threats.

You’ll leverage your generalist cyber security skills to address perimeter-related security needs, and work closely with cross-functional teams to implement defences that align with business goals.

Your impact and contribution:

• Perimeter Defence & Monitoring: Support the monitoring and management of tools that protect the bank’s perimeter. You’ll be exposed to edge security, API protection, cyber threat analysis, and external attack surface management —developing your skills along the way.
• Apply your risk and threat assessment skills to analyse, prioritise, and advise on events on the bank’s perimeter.
• Proactive Control Uplift: Collaborate on perimeter defense improvements, with a focus on both
  -- Technical Uplifts, such as integrations with other technology platforms.
  -- Domain Uplifts, such as process improvements and developing new capabilities.
• Collaborate and Influence: Work closely with engineering, project management, and business analysis teams, helping align security needs with business objectives.
• Continuous Learning and Industry Awareness: Stay up to date on the latest security trends, tools, and best practices, enhancing your knowledge to support our mission.

We’re interested in hearing from people with the following experience:

We’re interested in hearing from candidates from both security specialist and security generalist backgrounds. There is opportunity to apply your skills in new ways and expand your already strong experience into new areas.
If this is appealing to you, we encourage you to apply and welcome cover letters addressing the criteria.

• Strong experience in cyber security, across specialist or generalist domains.
• Interest in furthering their expertise in Attack Surface Management concepts, such as perimeter posture, network edge, and API security.
• Experience operating security tools, particularly technical tools focused on edge and perimeter controls.  
• Experience working with and interrogating data generated by security technologies, and experience gleaning actionable mitigations and risk insights from these datasets.
• Experience in cyber risk and threat assessments and technical investigative practices.
• A mindset focused on continuous improvement, eager to enhance and optimize security defences.
• A commitment to learning and development in cyber security, staying updated on industry trends, threats and intelligence.
• Effective communication skills and strong experience in collaborating across teams and convey technical concepts to non-technical stakeholders.