Safeguarding the future of banking

Cyber detection and response  

As part of this team, you’ll be at the frontline of our cyber defence. Working in real time to detect, investigate and respond to cyber threats across the bank. Analysing large volumes of data from network, application and security logs to identify events of interest and escalate genuine threats quickly.

Using market-leading detection engineering and response tooling, the team triages, prioritises and investigates security events, supporting Priority Cyber Response Investigations and broader cyber incidents in line with established response plans and regulatory requirements. This is a highly technical environment where tactics constantly evolve, giving you exposure to advanced tooling, real-world attack scenarios and meaningful, high-impact work protecting millions of customers. 

Cyber Controls

This team plays a critical role in preventing cyber attacks by defining, governing and assuring the controls that keep us secure-by-design. You’ll support the Technology Controls Council and broader CommBank Security teams to maintain and uplift control coverage across areas such as secure configuration, vulnerability management, data protection and cyber risk.

Your work will underpin mandatory security requirements for new products and systems, ensuring services meet established standards before release. As part of this team, you’ll work at the intersection of security, technology and risk. Helping to shape how cyber controls are applied consistently at scale across one of Australia’s most complex technology environments.    

Identity and Access Technology

Join a team responsible for the platforms that ensure the right people have the right access at the right time. Deliver and modernise enterprise-wide identity and access management capabilities, including authentication services, identity governance and privileged access management. Working in this team means contributing to large-scale transformation that directly improves security, resilience and trust across the bank. 

Cyber Engineering

Here you’ll design and build enterprise-grade security platforms and products that protect our technology estate by embedding security into systems from the ground up. Work closely with engineers, service owners and security specialists to implement secure by design architecture, automate security controls and strengthen resilience across applications, platforms and cloud environments.

You’ll work on complex, high-impact engineering problems at scale, applying security thinking to technology that millions of customers rely on every day.

Red and Purple teaming and penetration testing  

Red and Purple Teaming and Penetration Testing teams act as our ethical hackers. Proactively testing digital services to identify vulnerabilities before attackers can exploit them. As a penetration tester you’ll work across projects and business as usual services to assess applications, infrastructure and cloud environments, providing clear findings and supporting remediation.

Red Team activities simulate real-world attacker behaviour, while Purple Teams work closely with detection and response teams to ensure attacks can be identified and contained. If you’re looking for hands-on exposure to real attack techniques and the opportunity to directly improve detection capability across the bank this is the team gives you those opportunities.    

Governance, Risk and Compliance  

You’ll ensure our cyber security practices align with industry standards, regulatory expectations and internal policy frameworks. Maintain the CommBank Information Security Policy Framework, conduct compliance assessments, monitor control effectiveness and support engagement with regulators and business stakeholders.

A core part of the team is translating complex cyber requirements into clear guidance and education for teams across the organisation. You’ll have the opportunity to influence cyber outcomes at scale, combining deep security knowledge with strong stakeholder engagement.