Remote NZ Cyber Threat Intel & Incident Response Lead

Xplor Technologies; Auckland; Remote; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Paid Parental Leave benefit programs

#GiveBackDays/Commitment to social and

Diversity & Inclusion initiatives

Access to free mental health support

Flexible working arrangements

Job summary

Xplor Technologies is seeking a Cyber Threat Intelligence & Response engineer to lead incident response across our platforms and applications. The role is fully remote and requires NZ-based eligibility, with hands-on triage, investigation, and containment duties to strengthen detection and response capabilities.

You will drive investigations, build detections, and coordinate across engineering, IT, and leadership teams while leveraging MITRE ATT&CK and SIEM tooling to reduce threat impact.

Qualifications

• 3 to 6 years experience in security operations or incident response.

Responsibilities

• Own incidents as part of the CTIR team: detect, triage, investigate, contain and eradicate, driving each one until the threat is under control.
• Work live incidents alongside the team and be ready to step up and take the lead yourself when the situation calls for it.
• Lead investigations across our systems, digging into logs, endpoints, email and network data to work out what happened, how far it reached, and how to resolve.
• Perform host and network forensics, malware triage, and email analysis (including PDF and document analysis) to understand attacker activity and build a reliable timeline.
• Coordinate with engineering, IT and the wider security team during a response, and communicate clearly to both technical teams and leadership.
• Hunt proactively for threats across system logs, user behaviour and threat intelligence, turning what you find into new detections and indicators of compromise.
• Build and automate incident response workflows and playbooks so routine response is fast and repeatable.
• Strengthen our detection coverage using the MITRE ATT&CK framework, closing monitoring gaps, and tuning to reduce noise.
• Feed what you learn from each incident back into how the team detects and responds, so an attack pattern we've seen once is caught faster next time.
• Analyse threat intelligence, research emerging threats, and recommend practical mitigation.
• Be ready to work incidents as they arise, including on-call and out-of-hours cover when needed.

Skills

Incident response

Log analysis

Threat hunting

Forensics

SIEM experience

PowerShell scripting

Python scripting

Team leadership

Communication

Tools

Microsoft Sentinel

KQL

Job description

Xplor Technologies is seeking a Cyber Threat Intelligence & Response engineer to lead incident response across our platforms and applications. The role is fully remote and requires NZ-based eligibility, with hands-on triage, investigation, and containment duties to strengthen detection and response capabilities.

You will drive investigations, build detections, and coordinate across engineering, IT, and leadership teams while leveraging MITRE ATT&CK and SIEM tooling to reduce threat impact.