Security Operations Engineer: Cloud & Incident Response

New Zealand Red Cross; Auckland; Hybrid; NZD 76,000 - 92,000; Full time

Benefits offered by this job

Five weeks annual leave

Discounts on Southern Cross health保险

Job summary

New Zealand Red Cross is modernising its security operations and bringing cyber security in-house. You’ll lead day-to-day security, incident response, and vulnerability management in a fast-paced, mission-driven team.

We’re building robust cloud security across M365/Azure/AWS, improving detections, and driving risk governance with clear communications to non-technical stakeholders. A flexible, NZ-wide location supports a strong work‑life balance.

Qualifications

• 3–6 years of security operations or cloud security experience.
• Cloud security configuration knowledge — M365, Azure and/or AWS.
• Practical vulnerability management — scanning, severity assessment, remediation tracking.
• Risk communication — translating findings for non-technical stakeholders.
• Foundational scripting ability — PowerShell, Python or similar.
• Knowledge of security frameworks — NIST, ISO, CIS or equivalent.
• Bonus: experience transitioning from outsourced to in-house security models.

Responsibilities

• Own the day-to-day operational security, coordinate incident response, and manage the vulnerability register.
• Tuning SIEM and improving detection; onboarding log sources and reducing noise.
• Manage cloud/platform security bases and enforce Zero Trust and configuration baselines.
• Support risk governance and third‑party reviews with clear, plain-English explanations.
• Lead security awareness initiatives and phishing simulations to embed a security culture.

Skills

Security operations

Cloud security (M365/Azure/AWS)

Vulnerability management

Risk communication

Scripting (PowerShell/Python)

Security frameworks (NIST/ISO/CIS)

In-house transition experience

Job description

New Zealand Red Cross is modernising its security operations and bringing cyber security in-house. You’ll lead day-to-day security, incident response, and vulnerability management in a fast-paced, mission-driven team.

We’re building robust cloud security across M365/Azure/AWS, improving detections, and driving risk governance with clear communications to non-technical stakeholders. A flexible, NZ-wide location supports a strong work‑life balance.