Cloud Security Specialist

• Advise our clients on how to improve their cloud security posture
• Surround yourself with some of the best cyber security minds in New Zealand
• Further develop your technical and consulting skills

Calling for ‘cloudies’ and cloud security specialists to check out Bastion Security Group!

Our Offensive Security Services (OSS) team is integral to the successful running of our busy cybersecurity consultancy with offices in Auckland, Wellington and across Australia.

The role

This is a fast-paced and varied consulting role, working closely with an exciting range of clients across New Zealand and afar, from small kiwi-owned businesses to well-known public sector organisations.

You’ll be involved in reviewing and testing the cloud configuration for a range of companies with a goal of advising them on how to improve their cloud security posture. You will also provide consultancy on SaaS applications in relation to developing security policies, procedures and best practices.

The main responsibilities of the role are:

• Conduct Cloud Security Assessments of AWS, Azure and other cloud platforms, for both public and private sector clients
• Tenancy Security reviews (Networking, Storage Accounts, database configuration reviews, Subscription and Resource monitoring/logging, virtual machine configurations)
• Entra ID Reviews (PIM, MFA configuration, service principals, managed identities, conditional access)
• Microsoft 365 (SharePoint, MS Teams, Outlook)
• Power Platform
• SaaS Application Reviews (Snowflake, Salesforce, Remarkable, Genesys Cloud, Virsae)
• Lead client engagements and projects through their full lifecycle.
• Produce high-quality reports that highlight issues that you identify.

Who we’re looking for

A results-focused, cloud security specialist who enjoys engaging with clients and consistently delivers exceptional value. Ideally, you are already based in New Zealand, with a permanent right to work or a valid work visa.

Someone supportive and collaborative, assisting others through their technical journey, whilst also keeping up to date and getting involved in research and tooling yourself.

These are the main skills and experience we’re looking for:

• 3-5 years’ experience in the cloud security arena.
• Must have demonstrated experience with cloud security toolsets and cloud native technologies from both a practical and theoretical perspective.
• Strong working knowledge of the challenges and solutions associated with cloud specific security issues. You can assess risk and conduct a gap analysis to provide clients with pragmatic recommendations for improvement.
• Confidently communicate your knowledge and recommendations to a range of people, whether presenting in person, online, on the phone, or writing a report or email.
• Experience working with and certifications in Entra, Microsoft Azure and 365, including hands-on experience with Microsoft Azure platform engineering.
• Audit or engineering experience.
• Experience assessing and security SaaS environments.
• Broad technical exposure across areas such as identity, networking, security, hybrid infrastructure, containers, and cloud governance.
• You hold, or are currently studying for, cloud security certifications such as CCSK, AZ-900, AWS CCP.
• Though not essential, you might hold security certifications such as OSCP, OSCE, CREST, GPEN, GWAPT, GXPN, GMOB or OWSE.
• Skilled at analysing information, asking questions, and solving problems.
• You manage your time effectively, take ownership of projects or tasks to deliver work on time, and use your initiative to get stuff done.
• Ideally previous experience in consulting, managed services, or enterprise environments.

(Note this is not an opportunity for a new graduate)

Due to the nature of our work, this role requires a clean criminal record. Successful applicants will be required to complete a criminal record check during the onboarding process.

Benefits of Working for Bastion

You will work alongside an expert group of consultants and penetration testers who are dedicated to protecting others from cyber harm. The perks of being part of the Bastion team include:

• A collaborative, thoughtful team who do meaningful work and keep learning.
• A supportive work environment, great team culture, and regular social events.
• Training budget, study time allowance, regular internal training sessions, and an internal mentor programme.
• Competitive remuneration.
• Half yearly bonus scheme.
• Additional leave after 2 years.
• Access to a gym within a short walk of the office.

About us

Bastion Security Group provides best-in-class cybersecurity services through a high-performance culture built on quality, excellence and collaboration. Our skilled and empowered team is dedicated to achieving meaningful security outcomes and delivering lasting value for our clients.

‘Assess & Improve’, ‘Detect & Respond’, ‘Protect & Secure’, ‘Advise & Empower’ and stay ahead of evolving threats.

We deliver security services across strategy, architecture, operations and compliance. Whether it’s advising on board-level risks, embedding into client teams, or responding to incidents, our experts provide actionable insight grounded in real threats and real solutions.

To learn more about our New Zealand operation, visit https://bastionsecurity.co.nz/.

Apply today

If you have the desire to help us deliver excellence for our clients, we want to hear from you.

Apply now via Seek and yes, we do read your cover letter. We want to read about how joining our team will add value to your career path and why you decided to apply for our specific role.

We'll be reviewing applications on an ongoing basis as they come in, and depending on application volume, may close the advert early. If this is your ideal next role, we'd encourage you to get in touch today!

For a confidential conversation, contact Tracy via careers at bastion security .co .nz (written this way to bypass the bot that redacts email addresses)