Commonwealth Bank of Australia
The threat surface is massive: over 17 million customers across Australia and New Zealand, with transactions spanning retail banking, business banking, institutional banking, superannuation, insurance, and share-broking. Commonwealth Bank of Australia has been in operation since 1911, and with a workforce of more than 48,900, it's one of the largest financial services institutions in the region. The attack model for a bank of this scale isn't hypothetical - it's continuous, adversarial, and regulatory-driven. CBA's security teams operate across a sprawling integrated financial services platform. The domains aren't siloed; the bank runs superannuation and insurance products alongside core banking and share-broking services, which means identity, fraud detection, and transaction integrity aren't isolated problems - they're systemic. Security engineering here is about defending infrastructure that processes real economic activity for millions of people, with the compliance and audit obligations that come with it. The bank's stated strategy is to build tomorrow's bank today, which in practice means significant ongoing investment in digital infrastructure. For cybersecurity professionals, that translates to work at genuine scale: protecting systems that underpin the financial stability of a major economy, across multiple business lines and geographic markets. The work is institutional, not experimental.
The threat surface is massive: over 17 million customers across Australia and New Zealand, with transactions spanning retail banking, business banking, institutional banking, superannuation, insurance, and share-broking. Commonwealth Bank of Australia has been in operation since 1911, and with a workforce of more than 48,900, it's one of the largest financial services institutions in the region. The attack model for a bank of this scale isn't hypothetical - it's continuous, adversarial, and regulatory-driven.
CBA's security teams operate across a sprawling integrated financial services platform. The domains aren't siloed; the bank runs superannuation and insurance products alongside core banking and share-broking services, which means identity, fraud detection, and transaction integrity aren't isolated problems - they're systemic. Security engineering here is about defending infrastructure that processes real economic activity for millions of people, with the compliance and audit obligations that come with it.
The bank's stated strategy is to build tomorrow's bank today, which in practice means significant ongoing investment in digital infrastructure. For cybersecurity professionals, that translates to work at genuine scale: protecting systems that underpin the financial stability of a major economy, across multiple business lines and geographic markets. The work is institutional, not experimental.