Security Lead, Cyber Operations and Engineering

New Zealand Customs Service; Wellington; On-site; NZD 150,000 - 190,000; Full time

Job summary

The New Zealand Customs Service in Wellington is seeking a Security Lead – Cyber Operations and Engineering to act as the senior technical authority for its cyber security operations capability. This full-time permanent role leads cyber monitoring, threat detection, incident response, and security engineering across Customs’ technology landscape, driving risk reduction and resilience.

You will guide identity security, vulnerability management, cloud and endpoint security, secure email, and Zero

Qualifications

• Significant hands-on experience leading cyber security operations, detection engineering, security monitoring and incident response.
• Experience with Microsoft security technologies and cloud security architectures.
• Ability to develop and tune detections, analytics rules and automation workflows.
• Knowledge of NZISM, PSR, and industry best practices with security-by-design principles.

Responsibilities

• Lead cyber security operations, detection engineering, incident response, and security engineering activities.
• Drive AI-assisted security operations to improve threat detection and response.
• Establish security standards, guardrails and operational processes.
• Provide leadership across vulnerability management, identity security and Zero Trust.
• Collaborate with Digital and Technology teams to embed secure delivery.
• Act as escalation point during major cyber security incidents.
• Ensure alignment with NZISM, PSR and Customs policies.

Skills

Cyber ops leadership

Incident response

Threat detection

Security monitoring

Education

Bachelor's degree

Tools

Microsoft Defender XDR

Microsoft Sentinel

Entra ID

Intune

Exchange Online Protection

Microsoft 365 security

Job description

Jora New Zealand will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Security Lead, Cyber Operations and Engineering

New Zealand Customs Service – Wellington, North Island

Full time, Permanent

17h ago , from New Zealand Customs Service

An exciting opportunity as a Security Lead – Cyber Operations and Engineering is now available. This role is a full-time permanent position based in our Wellington Customhouse.

The Security Lead – Cyber Operations and Engineering is the senior technical authority for Customs' cyber security operations capability and provides leadership for the Cyber Operations and Security Engineering function. The role is responsible for driving operational security outcomes across the organisation, including cyber threat detection, incident response, security engineering, identity security, vulnerability management, secure email services, and the ongoing effectiveness of security controls.

This position is a permanent role within the Digital and Technology Cyber Security Team, providing specialist technical leadership and expertise across Customs' technology landscape. The role is accountable for strengthening Customs' cyber resilience against an increasingly sophisticated and rapidly evolving threat environment, including threats enabled by emerging Artificial Intelligence technologies.

The Security Lead – Cyber Operations and Engineering provides strategic oversight and operational leadership across cyber operations, ensuring that security monitoring, incident response, identity protection, vulnerability management, and security engineering activities are integrated, effective, and aligned with business priorities. The role serves as the Tier 3 escalation point and Incident Technical Lead for significant cyber security incidents and works closely with Digital and Technology teams to reduce technology risk and continuously improve security outcomes across Customs.

The successful applicant will play a key role in advancing Customs' cyber security maturity by:

• Leading cyber security operations, detection engineering, incident response, and security engineering activities across Customs.
• Driving the adoption of proactive and AI-assisted security operations capabilities to improve the speed and effectiveness of threat detection and response.
• Establishing and improving security standards, patterns, guardrails, and operational processes that strengthen Customs' security posture.
• Providing technical leadership across vulnerability management, identity security, cloud security, endpoint security, and secure email services.
• Partnering with Digital and Technology teams to embed security-by-design principles into technology delivery and operational services.
• Supporting the implementation of Zero Trust principles, environment segmentation, and security automation initiatives.
• Driving continuous improvement of cyber security controls and operational security capability across the organisation.
• Ensuring alignment with the New Zealand Information Security Manual (NZISM), Protective Security Requirements (PSR), and Customs policies and standards.

The Security Lead – Cyber Operations and Engineering operates at both a strategic and technical level, providing thought leadership, technical direction, and operational oversight to ensure Customs can effectively manage cyber risk in an increasingly complex technology environment.

To be successful as Security Lead – Cyber Operations and Engineering, the appointee requires the following knowledge, experience, skills, qualifications and/or personal attributes:

• Significant hands-on experience leading cyber security operations, detection engineering, security monitoring, and incident response functions within a medium or large enterprise environment.
• Demonstrated experience operating and optimising Microsoft security technologies, including Microsoft Defender XDR, Microsoft Sentinel, Entra ID, Intune, Exchange Online Protection, and Microsoft 365 security capabilities.
• Strong understanding of cyber-attack techniques, threat actor behaviours, and frameworks such as MITRE ATT&CK.
• Experience developing and tuning security detections, analytics rules, automation workflows, and threat hunting capabilities using Microsoft technologies and Kusto Query Language (KQL).
• Proven experience leading complex cyber security investigations and acting as a senior escalation point during cyber security incidents.
• Experience implementing and improving vulnerability management, identity security, privileged access management, and Zero Trust security controls.
• Demonstrated ability to develop and implement security engineering and operational improvement programmes across infrastructure, cloud, identity, applications, networks, and data platforms.
• Experience working with Artificial Intelligence-enabled security technologies and an understanding of the opportunities and risks associated with emerging AI capabilities.
• Strong knowledge of secure cloud technologies and Microsoft Azure security architecture.
• Knowledge of the New Zealand Information Security Manual (NZISM), Protective Security Requirements (PSR), Essential Eight, and industry best practices.
• Highly developed communication skills with the ability to explain complex technical concepts to both technical and non-technical audiences.
• Strong leadership, stakeholder engagement, and relationship management skills with the ability to influence outcomes across a diverse range of business and technology stakeholders.
• Demonstrated commitment to continuous professional development and maintaining awareness of emerging cyber security threats, technologies, and industry trends.

A tertiary qualification at least equivalent to bachelor's level and/or relevant industry certifications such as CISSP, CISM, GIAC, Azure Security Engineer, Microsoft Cybersecurity Architect, or equivalent certifications are highly desirable. This role may include leadership responsibilities and experience leading technical teams would be advantageous.

Be able to attain a New Zealand Government Top Secret National Security Clearance.

We aim to create a great place to work, where our people have a sense of belonging and the capability and desire to meet our future challenges. We are an organisation that is clear about our mission, and this is underpinned by Te Pou Tokomanawa (the Foundations) and our Whanonga Pono (Values). Our work really matters to the safety and success of New Zealand. [

Working for New Zealand Customs…

To join Customs in any role you must be a New Zealand citizen or New Zealand permanent resident and be able to obtain and maintain an Organisational Security Clearance, and be living in New Zealand at the time of application. This role requires the successful applicant to obtain and maintain security clearance to Top Secret level.

Because of the nature of Customs' work you must have a clear Police record. Organisational security clearances are mandatory and are conducted by Customs. You will also be required to pass a drug test.

Applications close at 5pm Tuesday 15 September 2026.

Please note Customs will be managing this recruitment independently in-house and will not be engaging with recruitment agencies at this stage.

New Zealand Customs Service | Te Mana Ārai o Aotearoa is a member of Diversity Works New Zealand and is committed to developing a diverse workforce and an inclusive workplace. It provides equal employment opportunities and welcomes applications from everyone who can meet the requirements of the role. Customs supports flexible working arrangements and welcomes the opportunity to speak with you about your flexible working requirements.

To contact for questions: John Bingham, Manager Information and Cyber Security at ************@customs.govt.nz.