Cloud Security Operations Engineer

Halter; Auckland; On-site; NZD 90,000 - 120,000; Full time

Job summary

Halter seeks a Cloud Security Operations Engineer to ensure the security of our AWS infrastructure during global scaling. Responsibilities include deploying security tooling on cloud services, improving incident response readiness, and evaluating new security capabilities.

The ideal candidate will have deep AWS security experience, strong incident response skills, and a pragmatic approach to security that enhances developer velocity.

Qualifications

• Deep experience with AWS and production cloud security.
• Strong security operations and incident response experience.
• Ability to improve monitoring and detection systems.

Responsibilities

• Secure AWS environment and improve hardening methods.
• Deploy and operate security tools on cloud infrastructure.
• Investigate security incidents and implement mitigation strategies.

Skills

AWS security

incident response

Infrastructure-as-Code (Terraform)

security monitoring

cloud environment management

Job description

We’re looking to bring on a Cloud Security Operations Engineer to ensure that our AWS infrastructure remains secure as we scale globally.

Responsibilities

• Secure and continuously improve our AWS environment across a mix of managed and self‑managed services.
• Deploy, configure, and operate security tooling on cloud infrastructure (including EC2 instances), improving hardening and visibility.
• Write and maintain Terraform/IaC to roll out security controls and configuration changes safely and repeatably.
• Investigate security events and incidents: assess severity and blast radius, drive mitigations, and embed learnings into prevention.
• Improve incident response readiness: playbooks, alert quality, response workflows, and automations to reduce time‑to‑detect and time‑to‑contain.
• Evaluate and roll out new security capabilities (e.g., SIEM/SOAR, EDR improvements, logging/telemetry), owning the journey from “is this fit for purpose?” to “this is running well in production.”
• Build security “platform” foundations that teams can consume easily — enabling developers rather than throwing problems over the wall.
• Participate in a security on‑call rotation (details evolving, likely similar to Platform’s approach).

Qualifications

• Deep experience with AWS and securing production cloud environments (strong understanding of AWS resource types and architecture).
• Strong security operations / incident response experience, including investigation and triage, ideally with EDR and SIEM‑style tooling.
• Comfortable turning noisy signals into high‑signal detections, and improving monitoring/detection over time.
• Strong Infrastructure-as-Code mindset (Terraform ideal; must be able to confidently read and change Terraform safely).
• Thrives in ambiguity and fast‑changing environments — can find the highest‑leverage problems and make progress without perfect runbooks.
• Pragmatic approach to security: reduces risk meaningfully while preserving developer velocity and operational effectiveness.
• Level‑headed and accountable — doesn’t panic, owns outcomes, and learns quickly.
• Comfortable working with AI as a tool (but thoughtful and critical, not hype‑driven).
• Motivated by Halter’s mission — you want your work to matter, even when it’s behind the scenes.

EEO Statement

Halter is committed to promoting a diverse and inclusive workplace — a place where we can each be ourselves and do the best work of our lives.