Cyber Security Engineer

About the Role

As a Cyber Security Engineer, you will play a vital role in safeguarding our organization's systems, networks, and data assets. Your responsibilities will include monitoring for cybersecurity threats, handling security incidents, and strengthening existing security measures. Collaborating closely with IT, engineering, and compliance departments, you will gain valuable mentorship and opportunities for career development, whether you are a newcomer to cybersecurity or possess some hands-on experience.

Key Responsibilities

• Monitor security alerts and events using Security Information and Event Management (SIEM) systems and other detection solutions.
• Investigate, triage, and respond to security incidents, escalating critical issues appropriately.
• Perform vulnerability scanning, oversee remediation efforts, and provide risk reporting.
• Assist in securing cloud environments, network infrastructure, endpoint devices, and identity management systems.
• Support access management processes involving multi-factor authentication (MFA), enforcing least privilege principles, and conducting user access reviews.
• Develop and contribute to security policies, procedures, and incident response playbooks.
• Help facilitate audits and compliance checks against standards such as ISO 27001, SOC 2, NZISM, and the Privacy Act 2020.
• Lead or support security awareness initiatives, including phishing simulation programs.
• Keep abreast of emerging cybersecurity threats and share insights with the team.

Qualifications and Experience

• Experience ranging from none up to four years in cybersecurity, IT security, SOC operations, systems or network administration, or similar fields; recent graduates and individuals transitioning careers with strong projects, laboratory work, or certifications are encouraged to apply.
• Fundamental understanding of key security principles such as threat types, attack vectors, the Confidentiality-Integrity-Availability (CIA) triad, encryption, authentication, and network security fundamentals.
• Working knowledge of Windows and Linux operating systems, as well as networking concepts including TCP/IP, DNS, and firewall technologies.
• Familiarity with cybersecurity frameworks like MITRE ATT&CK, NIST Cybersecurity Framework, or ISO 27001.
• Strong analytical thinking and meticulous attention to detail.
• Clear and effective communication skills to explain risks to audiences without technical backgrounds.

Preferred Skills and Certifications

• Possession of or willingness to pursue industry certifications such as CompTIA Security+, CySA+, SC-200, Certified Ethical Hacker (CEH), GSEC, or ISC2 Certified in Cybersecurity (CC).
• Practical experience with cybersecurity tools like Splunk, Microsoft Sentinel, CrowdStrike, Defender, Nessus, or Wireshark.
• Exposure to cloud platform security in AWS, Azure, or Google Cloud Platform.
• Proficiency in scripting languages including Python, PowerShell, or Bash.
• Knowledge of New Zealand’s Information Security Manual (NZISM) or Protective Security Requirements (PSR).
• Academic background in cybersecurity, computer science, IT, or related discipline, or equivalent hands-on experience.