Cyber Security Engineer

New Zealand Red Cross; Auckland; Hybrid; NZD 76,000 - 92,000; Full time

Benefits offered by this job

Five weeks annual leave

Discounts on Southern Cross health保险

Job summary

New Zealand Red Cross is modernising its security operations and bringing cyber security in-house. You’ll lead day-to-day security, incident response, and vulnerability management in a fast-paced, mission-driven team.

We’re building robust cloud security across M365/Azure/AWS, improving detections, and driving risk governance with clear communications to non-technical stakeholders. A flexible, NZ-wide location supports a strong work‑life balance.

Qualifications

• 3–6 years of security operations or cloud security experience.
• Cloud security configuration knowledge — M365, Azure and/or AWS.
• Practical vulnerability management — scanning, severity assessment, remediation tracking.
• Risk communication — translating findings for non-technical stakeholders.
• Foundational scripting ability — PowerShell, Python or similar.
• Knowledge of security frameworks — NIST, ISO, CIS or equivalent.
• Bonus: experience transitioning from outsourced to in-house security models.

Responsibilities

• Own the day-to-day operational security, coordinate incident response, and manage the vulnerability register.
• Tuning SIEM and improving detection; onboarding log sources and reducing noise.
• Manage cloud/platform security bases and enforce Zero Trust and configuration baselines.
• Support risk governance and third‑party reviews with clear, plain-English explanations.
• Lead security awareness initiatives and phishing simulations to embed a security culture.

Skills

Security operations

Cloud security (M365/Azure/AWS)

Vulnerability management

Risk communication

Scripting (PowerShell/Python)

Security frameworks (NIST/ISO/CIS)

In-house transition experience

Job description

Jora New Zealand will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

New Zealand Red Cross – Auckland, North Island

Permanent – Full Time (37.5 hours per week)

Flexible location within Aotearoa

NZRC offers a total remuneration approach of circa $84k for this role, which comprises of base salary as well as employer contribution to KiwiSaver. While remuneration rates are set to reflect that we are a humanitarian not for profit organisation, we believe our employee leave provision and flexible working arrangements, provide a highly rewarding work experience

We’re building something. Come build it with us.

Our IT team has a bit of a thing for nicknames. We’ve got the G.O.A.T., the Baby Goat, the Unicorn — and now we need the next one. Maybe that’s you.

New Zealand Red Cross is in the middle of an exciting digital transformation. We’re modernising how we operate, maturing our technology capability, and — critically — we’re bringing our cyber security function in-house. That means we need someone who can hit the ground running, build the kind of security operations that actually work, and do it all without taking themselves too seriously.

This isn’t a desk-warm-and-ticket-close role. You’ll be shaping how we detect, respond, and continuously improve. You’ll work in a small, opinionated, slightly chaotic, genuinely brilliant team — and the work will actually matter.

We’re flexible on location across Aotearoa New Zealand — what matters most is finding the right person. You’ll just need to be ready (and legally ready!) to work in New Zealand.

The team

Small team. Big ambitions. Zero boring meetings. (Okay, some boring meetings.)

We move fast, we support each other, we argue about the right way to do things, and then we go do them. We’re mid-transformation — which means there’s real stuff to fix, real stuff to build, and real ownership up for grabs if you want it.We’re also part of the world’s largest humanitarian network, which does give everything a bit of extra weight. Not in a heavy way. In a “yeah, this work actually means something” kind of way.

What you'll do:

You’ll own the day-to-day operational security, coordinate incident response, keep the vulnerability register honest, and help us build an awareness culture that doesn’t make people want to close the email immediately. Key areas include:

• Security operations and incident response — end-to-end coordination, triage, comms, and post-incident reviews
• SIEM tuning and detection improvement — onboarding log sources, improving signal quality
• Cloud and platform security — baseline configs, Zero Trust identity enforcement, configuration drift across M365 and Azure
• Vulnerability management — scanning, severity assessment, remediation prioritisation and tracking
• Risk governance and assurance support — risk assessments, register maintenance, third-party reviews
• Security awareness and phishing simulations — building a culture that actually sticks

A note on scope:this role is operational excellence, not enterprise architecture or org-level risk acceptance. You’ll escal…But there’s plenty of big stuff in between.

The stuff we actually care about.

We’re looking for 3–6 years of security operations or cloud security experience — someone who’s lived in a SIEM, wrestled with vulnerability scanners, and can explain a critical finding to a non-technical stakeholder without making their eyes glaze over.

• Cloud security configuration knowledge — M365, Azure and/or AWS
• Practical vulnerability management — scanning, severity assessment, remediation tracking
• Risk communication — the ability to translate findings into plain English
• Foundational scripting ability — PowerShell, Python or similar
• Knowledge of security frameworks — NIST, ISO, CIS or equivalent
• Bonus: experience transitioning from outsourced to in-house security models. You’ll know the particular joy of that adventure.

The vibe check

You can operate in ambiguity without breaking a sweat. You push back when something’s wrong, but you do it with kindness. You take the work seriously and yourself less so. You genuinely enjoy helping people understand why security matters — not by scaring them, but by making it make sense.You care about doing good work in a place that does good things. And you’d very much like a nickname.

About New Zealand Red Cross

New Zealand Red Cross is part of the world's largest humanitarian network, with over 13,000 members and employees dedicated to improving the lives of vulnerable people by mobilising the power of humanity and increasing community resilience.

Guided by our Fundamental Principles of humanity, impartiality, neutrality, independence, voluntary service, unity and universality, we support people in times of need and help strengthen their resilience.

We are committed to having an accessible, diverse, inclusive, and barrier-free work environment where everyone can reach their full potential. We encourage all qualified persons who share our values and want to contribute to fostering an inclusive and diverse workplace to apply.

Why work with us?

At New Zealand Red Cross, you’ll join a passionate and diverse team that values your contributions and shares your commitment to making a difference.

We are committed to represent the communities we serve, increasing diversity throughout our people and leadership, and creating a flexible and healthy work environment. Many roles offer flexible virtual/hybrid options to help our employees balance their personal and professional priorities.

Our benefits include:

• Five weeks annual leave
• Discounts on Southern Cross health insurance

We also encourage employee networks, including Takatāpui and Rainbow Network, Rōpū Hāpai Māori and the Sustainability Network, to foster connection and collaboration across our diverse workforce.

You must have the right to live and work in New Zealand to be considered for this job. Applications close at 05:00 pm on 06/09/2026