Senior Engineer, Cyber Operations and Engineering

Customs; Wellington; On-site; NZD 140,000 - 190,000; Full time

Job summary

Customs in New Zealand is seeking a Senior Engineer, Cyber Operations and Engineering to design, implement and continually improve security controls across our technology environment. You will work with architects, engineers and delivery teams to embed security from the start and provide expert advice on risks and controls.

In this role you will lead cyber security engineering activities, drive Zero Trust, manage vulnerabilities, support incidents, and mentor other engineers while ensuring NZISM

Qualifications

• Experience engineering security controls across complex environments.
• Strong knowledge of NZISM, Essential Eight and risk-based practices.
• Experience with Microsoft security products and cloud security.
• Ability to provide expert security leadership to delivery teams.

Responsibilities

• Provide senior technical leadership across cyber security engineering and assurance.
• Implement and improve security controls across cloud, infrastructure, network, identity and endpoints.
• Drive Zero Trust and security-by-design practices.
• Lead vulnerability management and remediation prioritisation by risk.
• Provide leadership during cyber incidents and investigations.
• Support audit and NZISM compliance activities.
• Report on control effectiveness and risks; recommend improvements.
• Mentor engineers and share security knowledge across the group.

Skills

Cyber security engineering

Zero Trust

Vulnerability management

Incident response

Microsoft security

Azure security

Security monitoring

NZISM knowledge

MITRE ATT&CK

Education

Tertiary qualification

Tools

Defender

Sentinel

Entra ID

Microsoft 365 Security

Azure security services

Job description

Senior Engineer, Cyber Operations and Engineering

Help protect Aotearoa's border by strengthening Customs' cyber resilience.

Cyber threats are constantly evolving, and Customs needs strong technical security leadership to keep our systems, data and people safe. As Senior Security Engineer, you'll design, implement and continuously improve the security controls that protect Customs' technology environment.

Working across Digital & Technology, you'll partner with architects, engineers and delivery teams to build security into our solutions from the start. You'll also provide expert advice on security risks and controls.

In this role, you will:

• provide senior technical leadership across cyber security engineering, operational security and assurance activities
• implement and improve security controls across cloud, infrastructure, network, identity, application and end-user computing environments
• drive Zero Trust, security-by-design and continuous assurance practices
• lead vulnerability management, prioritising remediation based on risk
• provide technical leadership during cyber security incidents and investigations
• support audit, assurance and NZISM compliance activities
• report on security control effectiveness, risks and trends, and recommend improvements
• mentor other engineers and share security knowledge across the group.

About you | Ko wai koe

You're an experienced cyber security professional who can turn complex technical issues into practical, risk-based solutions. You build strong relationships and explain technical concepts in plain language.

You'll bring:

• at least five years' experience in cyber security engineering, cyber operations or related technical security disciplines
• experience implementing and operating enterprise security controls in complex technology environments
• strong expertise in Microsoft security technologies, including Defender, Sentinel, Entra ID, Microsoft 365 Security and Azure security services
• experience in vulnerability management, identity, cloud, endpoint and network security, and security monitoring
• experience supporting incident response and investigations
• a strong understanding of the NZISM, Essential Eight, MITRE ATT&CK and Zero Trust principles
• a relevant tertiary qualification or equivalent practical experience (industry certifications such as Microsoft, ISC2, ISACA, GIAC or CompTIA are desirable)
• a commitment to continuous learning and staying current with emerging threats and technologies.
• This role requires the successful applicant to be able to obtain and maintain a NZSIS security clearance to Secret level.

Digital & Technology is an integral part of Customs. We provide the products and services that support Customs and other agencies across the border sector. You'll join a collaborative team that delivers stable, robust technology and develops new capabilities based on customer needs.

We're committed to supporting the Crown in its relationships with Māori under Te Tiriti o Waitangi. We encourage you to use te reo Māori and tikanga in your everyday mahi.

To work for Customs, you must be able to meet the following requirements:

• Be a New Zealand Citizen or New Zealand Permanent Resident
• Residing in New Zealand at the time of application
• Have resided continuously in New Zealand for the last ten years. Any exceptions to this will need to be discussed with recruitment to assess whether you will still be eligible to meet the Organisation's Security Clearance application criteria.

Applications close 11pm, Wednesday 18 November.

Please note Customs will be managing this recruitment independently in-house and will not be engaging with recruitment agencies at this stage.