Cyber Incident Responder

Organization: At CommBank, we never lose sight of the role we play in other people’s financial wellbeing. Our focus is to help people and businesses move forward to progress. To make the right financial decisions and achieve their dreams, targets, and aspirations. Regardless of where you work within our organisation, your initiative, talent, ideas, and energy all contribute to the impact that we can make with our work. Together we can achieve great things.

Job Title: Cyber Incident Responder Location: Bangalore-Manyata Tech Park

Business & Team: The Cyber Attack Response Team (CART) enables the Group to respond to cyber security events and incidents. The team serves as the Tier 2 cyber incident response function and is responsible for investigation, remediation and post-incident activities.

Impact &contribution: As a Cyber Security Incident Responder you will be responsible for responding to cyber attacks through preparation, investigation, remediation, and post-incident activities. The role involves working closely with various departments to ensure the organisation's ability to prevent, detect, and respond to cyber security incidents is continuously improved.

Roles & responsibilities:

As a Cyber Security Incident Responder, you will:

- Respond to escalated cyber security incidents while capturing essential details and artefacts.

- Analyse security logs and data to detect malicious activities, including malware reversal.

- Coordinate and investigate cyber security events and incidents based on documented playbooks, Standard Operating Procedures, and the Group’s Cyber Incident Response Plan.

- Utilise sensor data and correlated logs containing Operating System events, IDS/IPS, AV, web application firewalls, web proxy, and similar data to establish context and scope.

- Collaborate with different teams to contain and eradicate threats.

- Document incident details and maintain incident response records.

- Develop and implement incident response plans and procedures.

- Maintain incident response documentation, participate in post-mortems, and write incident reports.

- Demonstrate thought leadership in the enhancement of incident detection, response, and threat hunting capabilities.