Cloud Security Operations Engineer

Icehouseventures; Auckland; On-site; NZD 100,000 - 130,000; Full time

Job summary

Icehouseventures is looking for a Cloud Security Operations Engineer to secure and improve our AWS infrastructure. This hands-on role involves managing security tooling, incident response, and collaborating with the Platform team to integrate sound security practices into development workflows.

The ideal candidate will have strong experience with AWS, security operations, and Infrastructure-as-Code, particularly with Terraform. Join us at Icehouseventures to make your work impactful and contribute to our mission.

Qualifications

• Deep experience with AWS and securing production cloud environments.
• Strong security operations experience, including investigation and triage.
• Comfortable turning noisy signals into high-signal detections.
• Strong Infrastructure-as-Code mindset, ideally with Terraform.

Responsibilities

• Secure and continuously improve AWS environment across services.
• Write and maintain Terraform/IaC for security controls.
• Investigate security events and incidents.
• Build security foundations that developers can easily consume.

Skills

AWS

Security operations

Infrastructure as Code (Terraform)

Incident response

Monitoring and detection

Job description

Location

Auckland

Employment Type

Full time

Location Type

On-site

Department

Engineering

About the role

To ensure we can keep the system airtight and continue to deliver on this mission, we’re looking to bring on a Cloud Security Operations Engineer. Halter isn’t a “small SaaS app” - we support hundreds of thousands of devices operating out in the field, paired with a mobile + web product, and relied on daily by farmers. As we scale globally, security becomes less about checklists and more about building the right systems so we can move fast and stay secure.

This is a hands‑on role focused on AWS infrastructure security and security operations. You’ll be responsible for improving preventative controls, deploying and operating security tooling across our cloud environment, and strengthening our detection and incident response capability. You’ll also help evaluate and roll out new security technologies (think SIEM/SOAR, better telemetry/log pipelines, higher‑signal alerting, and automation) as our SecOps function matures.

You’ll collaborate closely with our Platform team, and partner with Application Security to build security foundations that engineers can actually use – the kind that make the secure path the easy path.

What your day could look like

• Secure and continuously improve our AWS environment across a mix of managed and self‑managed services.
• Deploy, configure, and operate security tooling on cloud infrastructure (including EC2 instances), improving hardening and visibility.
• Write and maintain Terraform/IaC to roll out security controls and configuration changes safely and repeatably.
• Investigate security events and incidents: assess severity and blast radius, drive mitigations, and embed learnings into prevention.
• Improve incident response readiness: playbooks, alert quality, response workflows, and automations to reduce time‑to‑detect and time‑to‑contain.
• Evaluate and roll out new security capabilities (e.g., SIEM/SOAR, EDR improvements, logging/telemetry), owning the journey from “is this fit for purpose?” to “this is running well in production.”
• Build security “platform” foundations that teams can consume easily – enabling developers rather than throwing problems over the wall.
• Participate in a security on‑call rotation (details evolving, likely similar to Platform’s approach).

Who we’re looking for

• Deep experience with AWS and securing production cloud environments (strong understanding of AWS resource types and architecture).
• Strong security operations / incident response experience, including investigation and triage, ideally with EDR and SIEM‑style tooling.
• Comfortable turning noisy signals into high‑signal detections, and improving monitoring/detection over time.
• Strong Infrastructure‑as‑Code mindset (Terraform ideal; must be able to confidently read and change Terraform safely).
• Thrives in ambiguity and fast‑changing environments – can find the highest‑leverage problems and make progress without perfect runbooks.
• Pragmatic approach to security: reduces risk meaningfully while preserving developer velocity and operational effectiveness.
• Level‑headed and accountable – doesn’t panic, owns outcomes, and learns quickly.
• Comfortable working with AI as a tool (but thoughtful and critical, not hype‑driven).
• Motivated by Halter’s mission – you want your work to matter, even when it’s behind the scenes.

Halter is committed to promoting a diverse and inclusive workplace – a place where we can each be ourselves and do the best work of our lives.

Research shows that while men apply to jobs when they meet an average of 60% of the requirements, women and under‑represented groups of candidates tend to only apply when they meet every requirement. If you think you have what it takes but don’t necessarily tick every requirement on this job description, please still get in touch and apply to Halter. We’d love to chat to see if you’ll be an epic fit!