DevSecOps Security Engineer: Vulnerability & Compliance

Thales; Otago; On-site; NZD 110,000 - 190,000; Full time

Job summary

Thales is seeking a Cybersecurity DevSecOps Engineer to support secure system lifecycles across IT/OT environments. You will automate security controls, enforce hardening, and configure audit logs for compliance with ISO 27001, NIST, and regional frameworks.

You will work with DevOps, SOC, and IT Operations teams to strengthen vulnerability management, threat detection, and incident response. Strong experience in CIS Benchmarks and recovery from vulnerabilities is essential.

Qualifications

• Degree in Engineering, Computer Science or related discipline majoring in Cybersecurity or relevant industry experience
• 5+ years of proven experience in the Cybersecurity field
• Strong knowledge in Cybersecurity solutions (e.g. IAM, PAM, SIEM, EDR, Keys, Firewall)
• Demonstrated ability to achieve effective outcomes in a multidiscipline, multi-culture environment
• Experience in system hardening and hardening review based on CIS Benchmarks or DISA STIG frameworks.

Responsibilities

• Vulnerability Management: understand scan reports, identify, assess and remediate vulnerabilities to reduce exposure.
• Configuration Auditing: ensure host configurations against CIS Benchmarks, STIGs and Thales hardening standards.
• SIEM & Monitoring: tune and optimise QRadar and Splunk rules, align with MITRE ATT&CK and threat intel feeds.
• Governance & Compliance: monitor adherence to ISO 27001, NIST, ITIL and regional standards; maintain audit evidence.
• Integration and Hardening: apply CIS-based configurations to COTS products, verify hardened states.
• Auditing & Monitoring: ensure secure configuration, monitor for threats and validate fixes.
• On-Call Support: provide when required to Thales’ customers.

Job description

Thales is seeking a Cybersecurity DevSecOps Engineer to support secure system lifecycles across IT/OT environments. You will automate security controls, enforce hardening, and configure audit logs for compliance with ISO 27001, NIST, and regional frameworks.

You will work with DevOps, SOC, and IT Operations teams to strengthen vulnerability management, threat detection, and incident response. Strong experience in CIS Benchmarks and recovery from vulnerabilities is essential.