CSOC Analyst – Security Operations (Auckland/Wellington)

About the role

The Security Operations squad at ANZ protects the bank, its customers and its systems from evolving cyber threats. As a CSOC Analyst you will safeguard customer data, identities and finances while ensuring the technology environment remains secure, resilient and available.

Key responsibilities

• Respond to security incidents and coordinate a cohesive response across multiple ANZ teams.
• Develop detections, automations and response workflows to improve threat identification and response.
• Investigate incidents across endpoints, networks, cloud platforms and identity systems.
• Provide root‑cause analysis, remediation plans and support during cyber‑security events.
• Create playbooks and solutions that enhance incident‑response capabilities and reduce manual effort.
• Evaluate and communicate the changing threat landscape, including emerging cloud, identity and enterprise techniques.
• Support investigations of modern attack techniques such as phishing, malware, ransomware, supply‑chain compromises and denial‑of‑service activity.

Required profile

• Experience in Security Operations, Incident Response, Threat Intelligence, Detection Engineering, Threat Hunting or a related cyber‑security discipline.
• Understanding of best practices in network security, systems security and cyber defence.
• Deep technical knowledge of application security, OS internals, infrastructure security, digital forensics, malware analysis, cloud security or identity security.
• Familiarity with security vulnerabilities, attacker TTPs and methods for detection and remediation.

Required skills

• Security Operations
• Incident Response
• Threat Intelligence
• Detection Engineering
• Threat Hunting
• Network Security
• Systems Security
• Application Security
• OS Internals
• Infrastructure Security
• Digital Forensics
• Malware Analysis
• Cloud Security
• Identity Security