Sourced directly from Westpac Group's own careers page
Information Security Senior Consultant
Westpac Group
London, England, United Kingdom
Thinking of applying? Check your CV against this job first.
See your match score, your strongest skills for this role, and what's missing — before you spend time on an application.
Your real match score
Free CareerPilot account · Takes about 2 minutes
Role Title: Information Security Senior Consultant – Detection and Response
(Europe & Americas)
Role location: London
About Westpac: Westpac is one of the world’s oldest banks and a leading
financial services organisation with a strong presence across Australia, New
Zealand and key international markets. We support individuals, businesses and
institutions through a broad range of banking and financial solutions.
Our culture is values led and performance driven. At Westpac, success is
measured by both what we deliver and how we deliver it. We focus on always
delivering safely, doing the right thing, executing with excellence and
delivering for customers. These outcomes are underpinned by our behaviours of
Care, Listen and Act, which guide how we work together and how we build trust
with our customers and communities.
About the Team: This role is a core part of Westpac’s global 24/7 cybersecurity
monitoring and incident response capability - the bank’s first line of cyber
defence.
How will I help?
You will be responsible for analysing and responding to potential cyber threats
and attacks against our systems, staff and customers.
You will also have the opportunity to design, validate, implement and
continually improve detection content, translating threat intelligence and
attacker behaviours into actionable detections aligned to Westpac’s environment
and cyber risk priorities.
Key Responsibilities
• Investigate and prioritise security alerts and events, supporting in-depth
analysis of logs and threat information from a variety of systems and
security tools, including endpoint and network devices.
• Ensure threats and alerts are prioritised based on risk, investigated and mitigated
effectively and efficiently, based on available context and data.
• Apply critical thinking and an analytical mindset to guide and influence decisions
where documented process is unclear or incomplete, including exceptions
escalated by junior team members.
• Maintain and continually uplift SOC capability by recommending, leading and
implementing operational and process improvements and contributing to the
team knowledge base.
• Collaborate with local and global detection and response teams to optimise
detections, integrate logic with SOAR playbooks and improve consistency,
coverage and control effectiveness.
• Support proactive threat hunting to identify control gaps, emerging threats
and opportunities to improve detection coverage.
What’s in it for me?
You’ll be joining a highly supportive and collaborative team with international
coverage during a period of growth across Westpac’s international regions. You
will work closely with experienced cyber security professionals and senior
stakeholders across our global offices, supporting incident response for real
world cyber incidents and operational environments.
We’re obsessed with becoming our customers' #1 banking partner for life and
we’re looking for people who are passionate about helping us achieve that goal.
In return, we’re committed to making Westpac the best place to work in the
country. Here are just a few of the ways we’re already doing that:
• Flexible work arrangements to help you achieve a greater work/life balance,
and a variety of leave options including Culture, Lifestyle and Wellbeing
leave.
• Tailored learning and development opportunities to help your grow your career
within the bank.
What do I need?
* 5+ years of relevant experience in a Cyber Security detection and response
role
• Hands on detection engineering experience and/or related qualifications
highly regarded
• Highly developed written and verbal communication, critical thinking, and
analytical skills.
• Proficiency with SOC tools such as SIEM and SOAR, ideally in a
corporate technology environment.
• A strong understanding of common cyber threats and attacks against financial
services organisations.
• Proven ability to translate incident learnings into practical improvements in
detection, response and operational resilience.
• Strong technical background, including knowledge of network technologies and
protocols.
• Ability to understand business context, identify issues, and
analyse and correlate information.
• Good understanding of concepts such as Cyber Kill Chain and MITRE ATT&CK
framework.
• A self-leader, capable of working independently on complex
tasks with minimal supervision.
How do I Apply?
Start Here. Just click on the APPLY button.