Staff Security Engineer: Ship Secure, AI-Driven Platform

Auror Limited; New Zealand; Hybrid; NZD 150,000 - 170,000; Full time

Benefits offered by this job

Competitive salary range

Annual bonus

Employee share scheme

Flexibility

Shorter work weeks (Fridays off)

Health insurance

Wellness support

Job summary

Auror Limited is hiring a Staff Security Engineer to join the Product & Engineering Security pillar. This engineer-first role focuses on shipping secure patches, building tooling, and raising the security bar from within the codebase.

The IC4 level role involves setting technical direction for security controls, architecture, and guardrails, while leading investigations and engaging cross-functional teams. Remote NZ-based candidates are welcome.

Qualifications

• Track record of writing production code and shipping changes that landed in real systems used by real users.
• Comfort working in unfamiliar codebases—reading through to root cause, opening PRs, and partnering with owning teams to get changes merged and deployed.
• Hands‑on experience with cloud platforms (GCP preferred, Azure or AWS welcome), CI/CD pipelines, and infrastructure‑as‑code (Terraform or similar)
• Deep technical understanding of multiple classes of security defects and how to design them out, not just catch them
• Strong application security background — threat modelling, architecture review, SAST and DAST, secure SDLC
• Working knowledge of AI and LLM security concerns — prompt injection, data exposure, model and tool‑use supply chain
• Comfort and fluency using AI engineering tooling to ship work faster, with judgement about where to apply it and where not to
• Experience with SIEM tooling — writing queries, building detections, running log analysis
• Comfort partnering with SRE and Platform on production systems and shipping changes alongside them
• Strong communication skills — explains the 'why' behind security decisions in language engineers respect
• Curiosity, low ego, and the ability to lead work independently in ambiguous territory
• Models thoughtful, calm decision‑making under pressure, especially in incidents
• We are looking for people who demonstrate a strong alignment to our Guiding Principles

Responsibilities

• Ship Code in the Platform: write patches, fix vulnerabilities, refactor weak patterns, and deploy changes with product engineering teams.
• Build Security Tooling and Automation: write tools, automation, and detections that scale the security team's impact.
• Application Security and Vulnerability Remediation: lead threat modelling and architecture reviews for major changes; close findings.
• Platform and Infrastructure Security: partner with SRE/Platform on cloud and infrastructure security, Terraform, pipelines, and CI/CD.
• AI Security and AI-Augmented Engineering: define and harden AI security patterns for AI features.
• Detection and Response: design detections, write playbooks, operate SIEM and CloudSIEM tooling.
• Customer Security and Assurance: be the technical voice in enterprise security discussions and audit responses.
• Standards, Patterns, and Coaching: set patterns for authentication, secrets, logging, and secure templates; coach engineers

Skills

Production code

Cloud platforms

CI/CD pipelines

Security engineering

Threat modelling

SAST/DAST

AI security

Incident response

Communication

Tools

Terraform

GitHub Actions

SIEM

Wiz SAST

Job description

Auror Limited is hiring a Staff Security Engineer to join the Product & Engineering Security pillar. This engineer-first role focuses on shipping secure patches, building tooling, and raising the security bar from within the codebase.

The IC4 level role involves setting technical direction for security controls, architecture, and guardrails, while leading investigations and engaging cross-functional teams. Remote NZ-based candidates are welcome.