CSOC Analyst – Security Operations

About the role

The Security Operations Centre (CSOC) at ANZ protects the bank, its customers and systems from evolving cyber threats. As a CSOC Analyst you will be the primary responder to security incidents, coordinating actions across multiple teams and continuously improving detection and response capabilities.

Key responsibilities

• Respond to security incidents and lead coordinated response efforts across ANZ.
• Develop detections, automations and response workflows to enhance threat identification.
• Investigate incidents across endpoints, networks, cloud platforms and identity systems.
• Provide root‑cause analysis, remediation plans and support during cyber‑security events.
• Create playbooks and solutions that reduce manual effort and improve response speed.
• Monitor and communicate changes in the threat landscape, especially cloud, identity and supply‑chain risks.
• Support investigations of phishing, malware, ransomware, identity‑based attacks, supply‑chain compromises and denial‑of‑service activity.

Required profile

• Experience in Security Operations, Incident Response, Threat Intelligence, Detection Engineering, Threat Hunting or a related cyber‑security discipline.
• Understanding of best practices in network security and security operations.
• Ability to work within a 24/7 on‑call roster and collaborate with cross‑functional teams.

Required skills

What we offer

• Permanent, full‑time role (37.5 hours per week) based in Auckland or Wellington.
• Opportunity to work in a leading bank’s cyber‑security team, tackling sophisticated threats.
• Professional development in a dynamic, technology‑focused environment.