Senior Engineer, Cyber Operations and Engineering

New Zealand Customs Service; Wellington; On-site; NZD 120,000 - 180,000; Full time

Job summary

New Zealand Customs Service in Wellington is seeking a Senior Security Engineer to design, implement and improve security controls that protect our technology environment. You'll collaborate with Digital & Technology, guiding architects, engineers and delivery teams to bake security into solutions from the start.

You will provide expert advice on security risks and controls, lead vulnerability management and incident response, and support NZISM compliance and audit activities while mentoring

Qualifications

• Five years' experience in cyber security engineering or related disciplines.
• Experience implementing enterprise security controls in complex tech environments.
• Strong knowledge of NZISM, Essential Eight, MITRE ATT&CK, and Zero Trust.
• Ability to obtain NZSIS security clearance to Secret level.

Responsibilities

• Provide senior technical leadership across cyber security engineering and assurance.
• Implement and improve security controls across cloud, infra, network, identity, apps and end-user computing.
• Drive Zero Trust and security-by-design and continuous assurance practices.
• Lead vulnerability management and prioritise remediation by risk.
• Provide technical leadership during cyber security incidents and investigations.
• Support audit, assurance and NZISM compliance activities.
• Report on security control effectiveness, risks and trends, and recommend improvements.
• Mentor engineers and share security knowledge across the group.

Skills

Cyber security leadership

Vulnerability management

Security controls

Incident response

NZISM compliance

Zero Trust

Education

Relevant tertiary qualification

Tools

Defender

Sentinel

Entra ID

Microsoft 365 Security

Azure security services

Job description

Help protect Aotearoa's border by strengthening Customs' cyber resilience.

About the role | Mō tēnei tūranga mahi

Cyber threats are constantly evolving, and Customs needs strong technical security leadership to keep our systems, data and people safe. As Senior Security Engineer, you'll design, implement and continuously improve the security controls that protect Customs' technology environment.

Working across Digital & Technology, you'll partner with architects, engineers and delivery teams to build security into our solutions from the start. You'll also provide expert advice on security risks and controls.

In This Role, You Will

• provide senior technical leadership across cyber security engineering, operational security and assurance activities
• implement and improve security controls across cloud, infrastructure, network, identity, application and end-user computing environments
• drive Zero Trust, security-by-design and continuous assurance practices
• lead vulnerability management, prioritising remediation based on risk
• provide technical leadership during cyber security incidents and investigations
• support audit, assurance and NZISM compliance activities
• report on security control effectiveness, risks and trends, and recommend improvements
• mentor other engineers and share security knowledge across the group.

About you | Ko wai koe

You're an experienced cyber security professional who can turn complex technical issues into practical, risk-based solutions. You build strong relationships and explain technical concepts in plain language.

You'll Bring

• at least five years' experience in cyber security engineering, cyber operations or related technical security disciplines
• experience implementing and operating enterprise security controls in complex technology environments
• strong expertise in Microsoft security technologies, including Defender, Sentinel, Entra ID, Microsoft 365 Security and Azure security services
• experience in vulnerability management, identity, cloud, endpoint and network security, and security monitoring
• experience supporting incident response and investigations
• a strong understanding of the NZISM, Essential Eight, MITRE ATT&CK and Zero Trust principles
• a relevant tertiary qualification or equivalent practical experience (industry certifications such as Microsoft, ISC2, ISACA, GIAC or CompTIA are desirable)
• a commitment to continuous learning and staying current with emerging threats and technologies.
• This role requires the successful applicant to be able to obtain and maintain a NZSIS security clearance to Secret level.

Working at Customs | Mahi ki te Mana Ārai o Aotearoa

Digital & Technology is an integral part of Customs. We provide the products and services that support Customs and other agencies across the border sector. You'll join a collaborative team that delivers stable, robust technology and develops new capabilities based on customer needs.

We're committed to supporting the Crown in its relationships with Māori under Te Tiriti o Waitangi. We encourage you to use te reo Māori and tikanga in your everyday mahi.

To work for Customs, you must be able to meet the following requirements:

• Be a New Zealand Citizen or New Zealand Permanent Resident
• Residing in New Zealand at the time of application
• Have resided continuously in New Zealand for the last ten years. Any exceptions to this will need to be discussed with recruitment to assess whether you will still be eligible to meet the Organisation's Security Clearance application criteria.

Applications close 11pm, Wednesday 18 November.

Please note Customs will be managing this recruitment independently in-house and will not be engaging with recruitment agencies at this stage.