Cybersecurity Incident Response Engineer

About the role

The University of Auckland is looking for a Cybersecurity Incident Response Engineer to join its dedicated Cybersecurity team. You will own high‑impact security incidents, guiding the response from detection through recovery while collaborating with senior leadership and an external Security Operations Centre.

Key responsibilities

• Lead and manage active security incidents, performing deep technical analysis and coordinating response activities.
• Work closely with the external Security Operations Centre to improve detection and response capabilities.
• Conduct threat analysis, support threat hunting, and contribute to proactive security monitoring.
• Enhance incident response processes, playbooks, and automation to increase operational efficiency.
• Assist security engineering tasks such as system hardening, vulnerability management, and tool optimisation.
• Mentor team members and help develop the overall incident response capability.

Required profile

• Experienced cybersecurity professional with a strong hands‑on background in incident response and security operations.
• Proven ability to lead major incidents and make decisions under pressure.
• Comfortable working in a developing or maturing security function and driving improvement initiatives.
• Clear and effective communicator able to engage with technical and non‑technical stakeholders.

Required skills

• Incident response
• Security operations
• Cloud security
• Threat analysis and hunting
• Vulnerability management

What we offer

• Permanent full‑time position (37.5 hours per week).
• Salary range $120,000 – $145,000 per annum, negotiable based on experience.
• Opportunity to shape a sector‑wide security operations capability across multiple universities.
• Collaborative environment with senior leadership and external partners.