Job Description

We’re working with a global organisation looking for someone to investigate attacks against its web applications. You’ll analyse application, server, authentication and traffic logs, piece together what happened and help the team respond. You’ll also write and fine-tune Web Application Firewall (WAF) rules to improve protection.

Strong log analysis is the main thing. You’ll need to understand HTTP/HTTPS, know how web applications work and recognise common attack methods and vulnerabilities, including the OWASP Top 10. Experience writing and tuning WAF rules is also important. Splunk and Akamai/CDN experience would be useful.

You’ll need experience investigating application attacks beyond working with endpoint tools such as Microsoft Defender.

The role works four days a week, either Wednesday to Saturday or Sunday to Wednesday, from 9:00am to 7:30pm AEST. You can be considered for either or both options, but once agreed, your roster stays the same each week.