Senior Engineer, Cyber Operations and Engineering

New Zealand Customs Service; Wellington; On-site; NZD 120,000 - 190,000; Full time

Job summary

New Zealand Customs Service seeks a Senior Security Engineer to design, implement and improve security controls across the technology environment. You will partner with architects, engineers and delivery teams to embed security from the start and provide expert risk-based guidance.

You will lead cyber security engineering, incident response and assurance activities, driving Zero Trust and continuous improvement across cloud, network and identity security. A security clearance is required.

Qualifications

• Five years' experience in cyber security engineering or related disciplines.
• Experience implementing enterprise security controls in complex technology environments.
• Strong expertise in Microsoft security technologies (Defender, Sentinel, Entra ID, Azure).
• Experience in vulnerability management, identity, cloud, endpoint and network security, and security monitoring.
• Experience supporting incident response and investigations.
• Strong understanding of NZISM, Essential Eight, MITRE ATT&CK and Zero Trust principles.
• A tertiary qualification or equivalent; industry certifications desirable.

Responsibilities

• Provide senior technical leadership across cyber security engineering, operational security and assurance activities.
• Implement and improve security controls across cloud, infrastructure, network, identity, and end-user computing environments.
• Drive Zero Trust, security-by-design and continuous assurance practices.
• Lead vulnerability management, prioritising remediation based on risk.
• Provide technical leadership during cyber security incidents and investigations.
• Support audit, assurance and NZISM compliance activities.
• Report on security control effectiveness, risks and trends, and recommend improvements.
• Mentor other engineers and share security knowledge across the group.

Skills

Cyber security leadership

Security controls

Vulnerability management

Zero Trust

Incident response

Audit & NZISM

Cloud security

Network security

Microsoft security technologies

Education

Relevant tertiary qualification

Security certifications (Microsoft, ISC2, ISACA, GIAC, CompTIA)

Tools

Microsoft Defender

Microsoft Sentinel

Entra ID

Microsoft 365 Security

Azure security services

Job description

Help protect Aotearoa's border by strengthening Customs' cyber resilience.

About the role | Mō tēnei tūranga mahi

Cyber threats are constantly evolving, and Customs needs strong technical security leadership to keep our systems, data and people safe. As Senior Security Engineer, you'll design, implement and continuously improve the security controls that protect Customs' technology environment.

Working across Digital & Technology, you'll partner with architects, engineers and delivery teams to build security into our solutions from the start. You'll also provide expert advice on security risks and controls.

In This Role, You Will

• provide senior technical leadership across cyber security engineering, operational security and assurance activities
• implement and improve security controls across cloud, infrastructure, network, identity, application and end-user computing environments
• drive Zero Trust, security-by-design and continuous assurance practices
• lead vulnerability management, prioritising remediation based on risk
• provide technical leadership during cyber security incidents and investigations
• support audit, assurance and NZISM compliance activities
• report on security control effectiveness, risks and trends, and recommend improvements
• mentor other engineers and share security knowledge across the group.

About you | Ko wai koe

You're an experienced cyber security professional who can turn complex technical issues into practical, risk-based solutions. You build strong relationships and explain technical concepts in plain language.

You'll Bring

• at least five years' experience in cyber security engineering, cyber operations or related technical security disciplines
• experience implementing and operating enterprise security controls in complex technology environments
• strong expertise in Microsoft security technologies, including Defender, Sentinel, Entra ID, Microsoft 365 Security and Azure security services
• experience in vulnerability management, identity, cloud, endpoint and network security, and security monitoring
• experience supporting incident response and investigations
• a strong understanding of the NZISM, Essential Eight, MITRE ATT&CK and Zero Trust principles
• a relevant tertiary qualification or equivalent practical experience (industry certifications such as Microsoft, ISC2, ISACA, GIAC or CompTIA are desirable)
• a commitment to continuous learning and staying current with emerging threats and technologies.
• This role requires the successful applicant to be able to obtain and maintain a NZSIS security clearance to Secret level.

Working at Customs | Mahi ki te Mana Ārai o Aotearoa

Digital & Technology is an integral part of Customs. We provide the products and services that support Customs and other agencies across the border sector. You'll join a collaborative team that delivers stable, robust technology and develops new capabilities based on customer needs.

We're committed to supporting the Crown in its relationships with Māori under Te Tiriti o Waitangi. We encourage you to use te reo Māori and tikanga in your everyday mahi.

To work for Customs, you must be able to meet the following requirements:

• Be a New Zealand Citizen or New Zealand Permanent Resident
• Residing in New Zealand at the time of application
• Have resided continuously in New Zealand for the last ten years. Any exceptions to this will need to be discussed with recruitment to assess whether you will still be eligible to meet the Organisation's Security Clearance application criteria.

Please note Customs will be managing this recruitment independently in-house and will not be engaging with recruitment agencies at this stage.

Applications close 11pm, Wednesday 18 November.