Security Engineer

DLA Piper LLP; Auckland; On-site; NZD 120,000 - 160,000; Full time

Job summary

DLA Piper NZ in Auckland seeks a hands-on Security Engineer to own how security is engineered, operated, and improved across endpoint, identity, cloud and network domains. You will lead security detection, response and risk-informed engineering with ISO 27001 alignment.

Working with internal IT teams and external providers, you will embed security into day-to-day operations, delivering auditable controls and clear visibility of risk and control effectiveness.

Qualifications

• 3-5+ years’ experience in security engineering or security operations.
• Hands-on with EDR, IAM, logging/SIEM, and cloud security.
• Experience in Microsoft and Azure environments.
• Experience in ISO 27001-aligned environments.
• Proven incident response and investigation capability.
• Excellent written and verbal communication skills.

Responsibilities

• Design, implement, and maintain security controls across endpoints, identity, cloud, and networks.
• Own security monitoring, logging, and alerting to ensure operational efficacy.
• Lead security incident response including triage, root-cause analysis, remediation.
• Operate vulnerability management processes and track remediation.
• Implement ISO 27001-aligned controls with audit evidence.
• Provide security insights, reporting, and risk visibility to Head of IT.
• Act as trusted security advisor translating risk into actionable guidance.

Skills

EDR tooling

IAM

Logging/SIEM

Cloud security

Azure

Incident response

Job description

This is an opportunity to step into a hands-on Security Engineer role in our Auckland office, where you will take ownership of how security is engineered, operated, and improved across DLA Piper New Zealand. You will work across a broad technology landscape to ensure controls are effective, auditable, and aligned with our risk obligations. This role focuses on building, operating, and continuously improving security controls across endpoint, identity, cloud, and network domains. You will lead security detection and response activities, manage risk through proactive engineering and automation, and ensure controls are measurable, auditable, and aligned with ISO 27001 and firm risk obligations. Working closely with internal IT teams and external security providers, you will play a key role in embedding security into day-to-day operations while providing clear visibility of risk and control effectiveness.

Main duties and responsibilities

• Design, implement, and maintain security controls across endpoint, identity, cloud, and network environments
• Own security monitoring, logging, and alerting, ensuring systems are operational, tuned, and effective
• Lead security incident response, including triage, investigation, root cause analysis, and remediation
• Operate vulnerability management processes, including assessment, prioritisation, and tracking of remediation
• Implement and maintain ISO 27001-aligned controls, including audit evidence and technical assurance
• Provide clear security insights, reporting, and risk visibility to the Head of IT
• Act as a trusted security advisor, translating technical risk into practical and actionable guidance

About you

We are looking for someone who brings the following experience and strengths:

• 3-5+ years’ experience in security engineering or security operations
• Strong hands-on experience with security tooling – e.g. EDR, IAM, logging/SIEM, and cloud security
• Experience operating security controls within Microsoft and Azure environments
• Experience working within ISO 27001-aligned environments
• Proven incident response and investigation capability
• Excellent written and verbal communication skills, with the ability to produce clear and auditable records

The below is desirable, though not essential:

• Relevant security certifications – e.g. Azure Security, CISSP, Microsoft SC-series, GCED, GCIH
• Experience working with MSSP or SOC providers
• Experience in legal, professional services, or regulated environments

Attributes:

• Curious, structured in your approach to problem solving, and eager to learn
• Strong interpersonal skills, with the ability to work effectively with both technical and non-technical stakeholders
• Able to remain effective under pressure, including during incidents and audit activity
• Proactive, self-directed, and comfortable working with minimal supervision
• Detail-focused and disciplined, with a strong sense of accountability for managing risk and evidencing outcomes
• Professional, resilient, and pragmatic in your approach

If you’re someone who takes pride in building well-controlled, effective security environments, and enjoys working as part of a collaborative team focused on getting the detail right, we would love to hear from you. We warmly welcome applications from our international DLA Piper colleagues, whether you are returning home to New Zealand or looking to relocate.

About us

We're a global law firm helping our clients achieve their goals wherever they do business. Our pursuit of innovation has transformed our delivery of legal services. With offices in the Americas, Europe, the Middle East, Africa and Asia Pacific, we deliver exceptional outcomes on cross-border projects, critical transactions and high-stakes disputes. At DLA Piper, we understand that inclusion s not a one-size-fits-all concept. We embrace and celebrate the range of perspectives, backgrounds and experiences that each individual brings to our firm. By fostering a culture that welcomes and appreciates all aspects of our individuality, we ensure that everyone has the opportunity to succeed. Our commitment to inclusion and positive social impact enables us to provide exceptional service to our clients and communities, while nurturing a unique and inclusive culture for all our people. We welcome the unique contribution that you will bring to our firm and actively encourage applications from all talented people – however your talent is packaged, whatever your background or circumstance and regardless of how you identify. We are committed to being accessible and accommodating any reasonable adjustments needed throughout the recruitment process to ensure an inclusive experience for all. If you need any support or adjustments, please let us know. Where local legislation permits, we conduct pre-engagement screening checks prior to your first day.

Job Reference

NZ006 ---

Function

IT ---

Category

Business Professionals ---

Employment Type

Full-time