Senior Threat Detection & Incident Response Architect

New Zealand Government; Palmerston North; On-site; NZD 140,000 - 190,000; Full time

Benefits offered by this job

Five weeks annual leave

Income protection

Career development opportunities

Job summary

NZ Transport Agency | Waka Kotahi (NZTA) seeks three Principal Engineers, Detection and Response to strengthen its cyber defence through advanced threat detection, threat hunting and incident response. You will work across SIEM, XDR and EDR platforms, designing and tuning detection content and leading response efforts.

You will contribute to automation, playbooks and tactical incident response while collaborating with security operations and threat intelligence teams to strengthen NZTA's cyber

Qualifications

• Design, tune and maintain detection rules across SIEM/XDR/EDR.
• Investigate suspicious activity and hunt threats using telemetry and intel.
• Experience translating threat intel into actionable detections; MITRE ATT&CK familiarity helpful.
• Automation/SOAR skills to improve workflows and playbooks.

Responsibilities

• Designing, tuning and maintaining detection rules and analytics.
• Leading threat hunting activities and translating threat intel into detections.
• Identifying detection gaps and driving improvements across detection capability.
• Developing automation, SOAR playbooks and response workflows.
• Acting as tactical responder for significant cyber incidents and on-call duties.

Skills

Detection engineering

Threat hunting

Incident response

Security leadership

Education

GCDA/GCIA/GCIH certifications

Tools

SIEM

XDR

EDR

Job description

NZ Transport Agency | Waka Kotahi (NZTA) seeks three Principal Engineers, Detection and Response to strengthen its cyber defence through advanced threat detection, threat hunting and incident response. You will work across SIEM, XDR and EDR platforms, designing and tuning detection content and leading response efforts.

You will contribute to automation, playbooks and tactical incident response while collaborating with security operations and threat intelligence teams to strengthen NZTA's cyber