Lead Threat Detection & Response Engineer

New Zealand Transport Agency; Auckland; Hybrid; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Flexible working

5 weeks annual leave

Income protection

Professional development

Inclusive culture

Job summary

New Zealand Transport Agency (NZTA) is seeking a seasoned security specialist to own threat detection and incident response. You will lead threat hunting, develop intelligence-led detections, and drive automation across SOAR playbooks and response workflows.

In this role, you will tune detection rules, validate content before deployment, and provide expert guidance on security tools and platforms. NZTA values Te Ao Māori awareness and public sector compliance.

Qualifications

• Experience designing, tuning and managing detection rules, correlation logic or behavioural analytics across SIEM, XDR or EDR platforms.
• Experience investigating suspicious activity and hunting threats using telemetry and threat intelligence.
• Familiarity with MITRE ATT&CK is beneficial; reduces detection gaps and improves response.
• Automation or scripting to improve security workflows; SOAR experience advantageous.

Responsibilities

• Own threat detection and support cyber incident response.
• Lead threat hunting and develop intelligence-led detections.
• Shape security automation and support major incident response.
• Design, tune and maintain detection rules and correlation logic across security platforms.
• Lead threat hunting activities and translate threat intelligence into actionable content.
• Identify detection coverage gaps and drive continuous improvement.

Skills

Threat detection design

Threat hunting

Automation scripting

MITRE ATT&CK familiarity

Education

GCDA/GCIA/GCIH certifications

Tools

SIEM

XDR

EDR

Job description

New Zealand Transport Agency (NZTA) is seeking a seasoned security specialist to own threat detection and incident response. You will lead threat hunting, develop intelligence-led detections, and drive automation across SOAR playbooks and response workflows.

In this role, you will tune detection rules, validate content before deployment, and provide expert guidance on security tools and platforms. NZTA values Te Ao Māori awareness and public sector compliance.