Senior Cybersecurity Engineer

About the role

Air New Zealand is seeking a Senior Cybersecurity Engineer to strengthen its cloud security posture, support incident response, and drive continuous improvement of security controls across the enterprise. You will work hands‑on with a range of security tools and collaborate with stakeholders to embed best practices and reduce risk.

Key responsibilities

• Implement and enhance cloud security controls to improve resilience and reduce risk.
• Support security incident response, coordinating with internal and external teams to minimise business impact.
• Engineer detection logic for SIEM, EDR, WAF and hand over monitoring with comprehensive documentation.
• Analyse security metrics and produce regular health reports for informed decision‑making.
• Identify vulnerabilities, partner with stakeholders to prioritise remediation, and reduce exposure across hybrid environments.
• Monitor, review and optimise WAF rules to protect customer‑facing platforms.
• Maintain high‑quality documentation, standards and procedures to ensure consistent, compliant security practices.

Required profile

• 3‑4 years of experience in operational cybersecurity roles.
• Strong understanding of defence‑in‑depth, least privilege, confidentiality, integrity and availability.
• Proficiency in vulnerability management, including mitigation strategies.
• Knowledge of security incident response processes, governance and control frameworks.
• Familiarity with SIEM tools and the ability to translate alerts into actionable insights.
• Experience with WAF and cloud technologies, preferably in hybrid environments.
• Experience with DDoS protection, API security, threat and vulnerability analysis, and risk assessment.
• Exposure to penetration‑testing concepts and emerging security trends is an advantage.
• Relevant qualification in computer science, engineering or equivalent, with a genuine passion for cybersecurity.
• Security or cloud certifications (e.g., AWS, CISSP) are beneficial but not mandatory.
• Experience with Infrastructure as Code (IaC) and automation scripting using Python.

Required skills

• Python
• AWS
• CISSP
• SIEM
• EDR
• WAF
• Infrastructure as Code (IaC)
• DDoS protection
• API security
• Vulnerability Management