Threat Management, Application Monitoring & Response
- Investigate attacks against web applications by analysing application, server, authentication and traffic logs.
- Develop and fine-tune Web Application Firewall (WAF) rules to strengthen application protection.
- Work a fixed four-day weekly roster, either Wednesday to Saturday or Sunday to Wednesday, from 9:00 am to 7:30 pm AEST.
Job Description
We’re working with a global organisation looking for someone to investigate attacks against its web applications. You’ll analyse application, server, authentication and traffic logs, piece together what happened and help the team respond. You’ll also write and fine-tune Web Application Firewall (WAF) rules to improve protection.
Strong log analysis is the main thing. You’ll need to understand HTTP/HTTPS, know how web applications work and recognise common attack methods and vulnerabilities, including the OWASP Top 10. Experience writing and tuning WAF rules is also important. Splunk and Akamai/CDN experience would be useful.
You’ll need experience investigating application attacks beyond working with endpoint tools such as Microsoft Defender.
The role works four days a week, either Wednesday to Saturday or Sunday to Wednesday, from 9:00am to 7:30pm AEST. You can be considered for either or both options, but once agreed, your roster stays the same each week.
We vet all employer accounts and do our best to keep job ads safe, but scams can still occur. Be cautious when sharing personal information — never provide financial details or make payments during the application process. For extra security, use the Apply button on our site when proceeding.