Senior Engineer, Cyber Operations and Engineering

New Zealand Government; Wellington; On-site; NZD 120,000 - 160,000; Full time

Job summary

New Zealand Customs Service is seeking a Senior Security Engineer to design, implement, and continuously improve security controls across our technology environment. You will lead cyber security engineering, operational security and assurance activities while partnering with architects and delivery teams to bake security into solutions from the start.

You will provide expert advice on risks and controls, drive Zero Trust, and mentor other engineers.

Qualifications

• Minimum five years in cyber security engineering or related fields.
• Experience delivering enterprise security controls in complex tech environments.
• Strong understanding of NZISM, Essential Eight, MITRE ATT&CK and Zero Trust principles.

Responsibilities

• Provide senior technical leadership across cyber security engineering, operational security and assurance activities.
• Implement and improve security controls across cloud, infrastructure, network, identity and end-user computing environments.
• Lead vulnerability management and incident response efforts with risk-based prioritization.
• Report on security control effectiveness, risks and trends, and recommend improvements.

Skills

Cyber security engineering

Incident response

Vulnerability management

Microsoft security tech

Zero Trust

Cloud security

Threat monitoring

Education

Tertiary qualification

Tools

Defender

Sentinel

Entra ID

Microsoft 365 Security

Azure security services

Job description

Help protect Aotearoa's border by strengthening Customs' cyber resilience.About the role | Mō tēnei tūranga mahiCyber threats are constantly evolving, and Customs needs strong technical security leadership to keep our systems, data and people safe. As Senior Security Engineer, you'll design, implement and continuously improve the security controls that protect Customs' technology environment.Working across Digital & Technology, you'll partner with architects, engineers and delivery teams to build security into our solutions from the start. You'll also provide expert advice on security risks and controls.In this role, you will:provide senior technical leadership across cyber security engineering, operational security and assurance activitiesimplement and improve security controls across cloud, infrastructure, network, identity, application and end-user computing environmentsdrive Zero Trust, security-by-design and continuous assurance practiceslead vulnerability management, prioritising remediation based on riskprovide technical leadership during cyber security incidents and investigationssupport audit, assurance and NZISM compliance activitiesreport on security control effectiveness, risks and trends, and recommend improvementsmentor other engineers and share security knowledge across the group.About you | Ko wai koeYou're an experienced cyber security professional who can turn complex technical issues into practical, risk-based solutions. You build strong relationships and explain technical concepts in plain language.You'll bring:at least five years' experience in cyber security engineering, cyber operations or related technical security disciplinesexperience implementing and operating enterprise security controls in complex technology environmentsstrong expertise in Microsoft security technologies, including Defender, Sentinel, Entra ID, Microsoft 365 Security and Azure security servicesexperience in vulnerability management, identity, cloud, endpoint and network security, and security monitoringexperience supporting incident response and investigationsa strong understanding of the NZISM, Essential Eight, MITRE ATT&CK and Zero Trust principlesa relevant tertiary qualification or equivalent practical experience (industry certifications such as Microsoft, ISC2, ISACA, GIAC or CompTIA are desirable)a commitment to continuous learning and staying current with emerging threats and technologies.This role requires the successful applicant to be able to obtain and maintain a NZSIS security clearance to Secret level.Working at Customs | Mahi ki te Mana Ārai o AotearoaDigital & Technology is an integral part of Customs. We provide the products and services that support Customs and other agencies across the border sector. You'll join a collaborative team that delivers stable, robust technology and develops new capabilities based on customer needs.We're committed to supporting the Crown in its relationships with Māori under Te Tiriti o Waitangi. We encourage you to use te reo Māori and tikanga in your everyday mahi.To work for Customs, you must be able to meet the following requirements:Be a New Zealand Citizen or New Zealand Permanent ResidentResiding in New Zealand at the time of applicationHave resided continuously in New Zealand for the last ten years. Any exceptions to this will need to be discussed with recruitment to assess whether you will still be eligible to meet the Organisation's Security Clearance application criteria.How to apply | Me pēhea te whakauruPlease apply online and submit your current CV and a tailored cover letter. Please note that we are unable to accept applications or CVs submitted via email.To learn more about this opportunity, please refer to the attached Position Description or contact Suzanne Leahy (Senior Corporate Recruitment Advisor) at [e-mail] close 11pm, Wednesday 18 November.Please note Customs will be managing this recruitment independently in-house and will not be engaging with recruitment agencies at this stage.