Wellington-based IT solutions provider delivering custom web platforms, cloud migration, managed IT services and cybersecurity for SMEs and public-sector clients across New Zealand and the Pacific.

Role summary

Detect, investigate and respond to security incidents across client environments; monitor SIEM and telemetry, perform threat hunting, analyse alerts, and support remediation to maintain confidentiality, integrity and availability of systems for our SME and public-sector clients.

Key responsibilities

• Monitor SIEM, IDS/IPS, endpoint telemetry and cloud security alerts; triage and investigate security events
• Conduct incident response: containment, eradication, recovery and post‑incident reporting
• Perform threat hunting, log analysis and forensic evidence collection using OSINT and internal telemetry
• Tune detection rules, build alerts and maintain playbooks and runbooks for common incident types
• Work with clients and internal teams to implement mitigations, apply patches and harden systems
• Prepare incident reports, executive summaries and technical recommendations for stakeholders
• Maintain and operate security tooling (EPP/EDR, SIEM, SOAR, vulnerability scanners) and support integrations
• Conduct regular vulnerability scans, assist in remediation tracking and support penetration-test follow-ups
• Participate in security reviews, tabletop exercises and contribute to continuous improvement of SOC processes
• Support compliance reporting and adherence to NZ privacy and regulatory expectations where applicable

Qualifications & experience

• Bachelor’s degree in cybersecurity, computer science, information technology or equivalent experience preferred
• 2+ years’ hands‑on SOC/incident-response experience (or strong security engineering/analyst background)
• Experience with SIEM platforms (e.g., Splunk, Elastic, QRadar), EDR tools and cloud-native security (AWS/Azure/GCP)
• Strong log‑analysis skills (Windows, Linux, network devices, cloud logs) and proficiency with querying languages (Splunk SPL, KQL, Elasticsearch DSL or SQL)
• Familiarity with common attack techniques, MITRE ATT&CK, malware analysis basics and forensic methodologies
• Knowledge of networking, TCP/IP, firewalls, VPNs and common authentication mechanisms

Skills & attributes

• Analytical, methodical and able to work under pressure during incidents
• Clear written and verbal communication; able to explain technical issues to non-technical stakeholders
• Strong teamwork, documentation discipline and a security-first mindset
• Willingness to work shifts and participate in an on-call rota

Pay: $50.20 – $110.06 per hour

Benefits:

• Employee mentoring program
• Free drinks
• Health insurance
• Life insurance
• Profit sharing
• Referral program
• Unlimited annual leave
• Vision insurance

Work Location: On the road