Cyber Security Engineer

Salary: Flexible location+5 wks AL +12 days sick leave

Cyber Security Engineer

Permanent – Full Time (37.5 hours per week)

Flexible location within Aotearoa

NZRC offers a total remuneration approach of circa $84k for this role, which comprises of base salary as well as employer contribution to KiwiSaver. While remuneration rates are set to reflect that we are a humanitarian not for profit organisation, we believe our employee leave provision and flexible working arrangements, provide a highly rewarding work experience

About the role – Kōrero mō te tūranga

We’re building something. Come build it with us.

Our IT team has a bit of a thing for nicknames. We’ve got the G.O.A.T., the Baby Goat, the Unicorn — and now we need the next one. Maybe that’s you.

New Zealand Red Cross is in the middle of an exciting digital transformation. We’re modernising how we operate, maturing our technology capability, and — critically — we’re bringing our cyber security function in-house. That means we need someone who can hit the ground running, build the kind of security operations that actually work, and do it all without taking themselves too seriously.

This isn’t a desk-warm-and-ticket-close role. You’ll be shaping how we detect, respond, and continuously improve. You’ll work in a small, opinionated, slightly chaotic, genuinely brilliant team — and the work will actually matter.

We’re flexible on location across Aotearoa New Zealand — what matters most is finding the right person. You’ll just need to be ready (and legally ready!) to work in New Zealand.

The team

Small team. Big ambitions. Zero boring meetings. (Okay, some boring meetings.)

We move fast, we support each other, we argue about the right way to do things, and then we go do them. We’re mid-transformation — which means there’s real stuff to fix, real stuff to build, and real ownership up for grabs if you want it. We’re also part of the world’s largest humanitarian network, which does give everything a bit of extra weight. Not in a heavy way. In a “yeah, this work actually means something” kind of way.

What you'll do:

You’ll own the day-to-day operational security, coordinate incident response, keep the vulnerability register honest, and help us build an awareness culture that doesn’t make people want to close the email immediately. Key areas include:

• Security operations and incident response — end-to-end coordination, triage, comms, and post-incident reviews
• SIEM tuning and detection improvement — onboarding log sources, improving signal quality
• Cloud and platform security — baseline configs, Zero Trust identity enforcement, configuration drift across M365 and Azure
• Vulnerability management — scanning, severity assessment, remediation prioritisation and tracking
• Risk governance and assurance support — risk assessments, register maintenance, third-party reviews
• Security awareness and phishing simulations — building a culture that actually sticks

A note on scope: this role is operational excellence, not enterprise architecture or org-level risk acceptance. You’ll escalate the big stuff. But there’s plenty of big stuff in between.

Who are we looking for? – Mā‎ wai te mahi nei?

The stuff we actually care about.

We’re looking for 3–6 years of security operations or cloud security experience — someone who’s lived in a SIEM, wrestled with vulnerability scanners, and can explain a critical finding to a non-technical stakeholder without making their eyes glaze over.

• Hands-on SIEM experience — alert triage, log onboarding, detection improvement
• Cloud security configuration knowledge — M365, Azure and/or AWS
• Practical vulnerability management — scanning, severity assessment, remediation tracking
• Risk communication — the ability to translate findings into plain English
• Foundational scripting ability — PowerShell, Python or similar
• Knowledge of security frameworks — NIST, ISO, CIS or equivalent
• Bonus: experience transitioning from outsourced to in-house security models. You’ll know the particular joy of that adventure.

The vibe check

You might be our person if…

You can operate in ambiguity without breaking a sweat. You push back when something’s wrong, but you do it with kindness. You take the work seriously and yourself less so. You genuinely enjoy helping people understand why security matters — not by scaring them, but by making it make sense. You care about doing good work in a place that does good things. And you’d very much like a nickname.

About New Zealand Red Cross

New Zealand Red Cross is part of the world's largest humanitarian network, with over 13,000 members and employees dedicated to improving the lives of vulnerable people by mobilising the power of humanity and increasing community resilience.

Guided by our Fundamental Principles of humanity, impartiality, neutrality, independence, voluntary service, unity and universality, we support people in times of need and help strengthen their resilience.

We are committed to having an accessible, diverse, inclusive, and barrier-free work environment where everyone can reach their full potential. We encourage all qualified persons who share our values and want to contribute to fostering an inclusive and diverse workplace to apply.

Why work with us?

At New Zealand Red Cross, you’ll join a passionate and diverse team that values your contributions and shares your commitment to making a difference.

We are committed to represent the communities we serve, increasing diversity throughout our people and leadership, and creating a flexible and healthy work environment. Many roles offer flexible virtual/hybrid options to help our employees balance their personal and professional priorities.

Our benefits include:

• Five weeks annual leave
• Career development opportunities
• Annual flu vaccinations
• Discounts on Southern Cross health insurance

We also encourage employee networks, including Takatāpui and Rainbow Network, Rōpū Hāpai Māori and the Sustainability Network, to foster connection and collaboration across our diverse workforce.

Click below to download the job description and to apply for this position please click the 'Apply Now' button to be taken to the New Zealand Red Cross Careers page. If you are already viewing this via the New Zealand Red Cross Careers page, please click the active job description link below.

Please submit your application online, as we’re unable to accept direct applications. Your application must include the following documentation:

• A recent copy of CV/Resume

• Cover Letter

• Passport

• Legal Right to Work In New Zealand

You must have the right to live and work in New Zealand to be considered for this job. Applications close at 05:00 pm on 06/09/2026

If you wish to discuss this opportunity or for further information, please contact Stacey Perrett at [email protected].

Note: We reserve the right to close applications before the closing date, so please register your interest early.

Click here for the Job Description