Senior Cybersecurity Specialist (DevSecOps/Vulnerability Management/Cloud/WAF)

About the role

Join Air New Zealand’s Cyber Security team to protect one of the country’s most recognised brands. You will enhance cloud security, embed DevSecOps practices and reduce cyber risk across the organisation.

Key responsibilities

• Identify security vulnerabilities, assess risk and support remediation planning.
• Maintain and improve SDLC security tooling such as SAST and SCA to enable DevSecOps.
• Implement, monitor and refine cloud security controls.
• Manage WAF rules, DDoS protection and performance monitoring.
• Ensure compliance of outsourced infrastructure providers with security controls.
• Produce security health reports and analyse security metrics.
• Monitor security incidents via SIEM, coordinate response and participate in incident resolution.
• Maintain and publish security policies, standards and guidelines.

Required profile

• 4+ years of experience in cybersecurity, focusing on vulnerability management and risk analysis.
• Hands‑on experience with DevSecOps practices and security tooling (SAST, SCA, secure SDLC).
• Strong knowledge of cloud security engineering and hybrid network environments.
• Experience managing WAFs and using SIEM platforms.
• Understanding of security incident response, governance and control frameworks.
• Relevant certifications (e.g., AWS, CISSP) are a plus.

Required skills

• DevSecOps
• SAST
• SCA
• Cloud security engineering
• WAF management
• SIEM monitoring
• Security incident response

What we offer

• Discounted staff travel for you and your whānau.
• FlexiLeave – purchase up to four extra weeks of leave.
• Learning and development opportunities.
• Wellbeing support and employee discounts.