Principal Cyber Security Architect - Hybrid AI Defense

Southern Cross Group; Auckland; Hybrid; NZD 180,000 - 240,000; Full time

Benefits offered by this job

Funded health insurance

Wellbeing programme

Flexible working arrangements

Job summary

Southern Cross Healthcare is seeking a Principal Cyber Security Engineer in Auckland to shape cyber defence for New Zealand’s largest healthcare provider. You will lead security operations, threat detection, incident response, and security engineering across cloud-native environments and DevSecOps practices.

You will mentor engineers, set technical standards, and influence security priorities while remaining available for on-call responses during significant incidents.

Qualifications

• 10+ years in security operations, incident response and security engineering.
• Strong leadership and mentoring ability in large teams.
• Hands-on with SIEM, XDR/EDR, SOAR and cloud security.
• Knowledge of MITRE ATT&CK and cyber resilience practices.

Responsibilities

• Lead Security Operations, threat detection and incident response.
• Drive complex security engineering initiatives and automation.
• Oversee vulnerability management and security monitoring.
• Guide DevSecOps, IaC and cloud-native security strategies.
• Provide technical leadership during cyber incidents and on-call responses.

Skills

Security Operations

Threat detection

Incident response

Security engineering

Cloud security

DevSecOps

Infrastructure as Code

AI security

MITRE ATT&CK

Digital forensics

Education

Relevant tertiary qualifications in cyber security/IT

Tools

SIEM

XDR/EDR

SOAR

Identity security

Endpoint security

Palo Alto & Microsoft security

Job description

Southern Cross Healthcare is seeking a Principal Cyber Security Engineer in Auckland to shape cyber defence for New Zealand’s largest healthcare provider. You will lead security operations, threat detection, incident response, and security engineering across cloud-native environments and DevSecOps practices.

You will mentor engineers, set technical standards, and influence security priorities while remaining available for on-call responses during significant incidents.