Senior Security Engineer - Cloud & Threat Modelling

Beca Limited; Auckland; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Shareholding opportunities

Flexible working arrangements

Wellbeing and volunteer leave

Enhanced parental leave

Job summary

Beca Limited is seeking a Senior Security Engineer to protect information assets and technology platforms while supporting its digital transformation. You will collaborate with architects, engineers and platform owners to embed security across enterprise systems, cloud environments, applications, data platforms and AI-enabled technologies.

This role involves influencing security outcomes, contributing to threat modelling and incident response, and developing standards and controls to be applied

Qualifications

• Significant experience in security engineering within medium to large-scale environments.
• Strong knowledge of Microsoft security technologies across cloud, applications, platforms and infrastructure.
• Experience conducting threat modelling, risk assessments and security reviews.
• Knowledge of ISO 27001, NIST Cybersecurity Framework and related standards.
• Ability to partner with engineering teams to embed security into delivery processes.

Responsibilities

• Provide specialist guidance and influence security outcomes across enterprise systems and cloud environments.
• Contribute to security architecture reviews, threat modelling, security assurance and incident response.
• Develop and promote security standards, patterns and controls across the organisation.

Skills

Security engineering

Cybersecurity

Cloud security

Threat modelling

Risk assessments

Incident response

Security reviews

Security controls

ISO 27001

NIST CSF

Communication skills

Job description

Beca Limited is seeking a Senior Security Engineer to protect information assets and technology platforms while supporting its digital transformation. You will collaborate with architects, engineers and platform owners to embed security across enterprise systems, cloud environments, applications, data platforms and AI-enabled technologies.

This role involves influencing security outcomes, contributing to threat modelling and incident response, and developing standards and controls to be applied