Senior Cyber Threat & Incident Response Engineer

Xplor; Auckland; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Paid Parental Leave

Volunteer days

Diversity & Inclusion initiatives

Free mental health support

Flexible working arrangements

Job summary

Xplor Technologies is seeking a Senior Cybersecurity Engineer for Cyber Threat Intelligence & Response. You will own and drive the incident lifecycle, from triage to eradication, across multiple platforms, coordinating with engineering and leadership.

The role emphasizes hands-on response, threat hunting, and building automated playbooks to shorten containment time. Remote work is available for based in NZ with full working rights.

Qualifications

• 3 to 6 years experience in security operations or incident response.
• Hands-on incident handling across the full incident lifecycle.
• Strong ability to translate complex risks into actionable insights.
• Good understanding of logs (HTTP, SMTP, network), Windows AD, and IT infrastructure.

Responsibilities

• Own incidents as part of the CTIR team; triage, investigate, contain and eradicate.
• Lead live incidents and step up to take the lead when needed.
• Investigate across systems, logs, endpoints, email, and network data to determine impact and resolution.
• Coordinate with engineers and leadership; communicate findings clearly.
• Hunt threats across logs and threat intelligence to improve detections.
• Build and improve incident response workflows and runbooks.

Skills

Incident response

Threat hunting

SIEM

Microsoft Sentinel

KQL

EDR

Threat intelligence

Automation

Forensics

Communication

Tools

Jupyter Notebooks

PowerShell

Python

Job description

Xplor Technologies is seeking a Senior Cybersecurity Engineer for Cyber Threat Intelligence & Response. You will own and drive the incident lifecycle, from triage to eradication, across multiple platforms, coordinating with engineering and leadership.

The role emphasizes hands-on response, threat hunting, and building automated playbooks to shorten containment time. Remote work is available for based in NZ with full working rights.