Lead Cyber Security Engineer

Microsoft security stack | Incident response | Security project leadership

Why you would like it

• Hands-on ownership across the Microsoft security suite
• Lead incident response and key remediation work
• Shape the 2027–2029 security roadmap
• Funded learning and relevant certifications
• Hybrid working: 2 days WFH, Wednesday in-office

The opportunity

This is a strong move for a senior, hands-on Security Engineer who wants real influence without stepping away from the technology. You’ll help improve security posture across a 3,000-person, 40+ location national organisation where security plays a central role in daily operations.

The strategy is already in motion. Your job is to execute it well, strengthen engineering capability, lead security-centred projects, and progressively help shape what comes next through 2027, 2028 and 2029. This is a leadership-of-function role, but not a “preside over” role. You’ll be close to the platforms, the controls, the incidents, and the outcomes.

Company profile

This is a large, well-established national organisation with genuine operational scale and complexity. It is a full Microsoft environment, so strong capability across the Microsoft Security Suite is mandatory.

The business has a positive learning culture and will fund relevant professional development and certifications. You’ll work with people who value trust, clear communication and practical, tested security solutions.

The role

You will:
Own and improve security engineering capability across Microsoft Sentinel, Microsoft Defender, Entra ID, Defender for Cloud Apps, Defender for Endpoint and Microsoft Purview 
Lead security incident response, including triage, containment, investigation, remediation, root cause analysis and post-incident reviews 
Build and tune detection logic, alerts, dashboards and response playbooks, including KQL-based queries and automation where appropriate 
Drive remediation from a Purple Team review, translating findings into clear work packages and accountable delivery 
Design and deliver a tabletop exercise programme, including scenarios, facilitation, lessons learned and action tracking 
Lead Infrastructure Engineers through security-focused project work, including identity hardening, endpoint protection, secure configuration, access controls and monitoring uplift 
Review and implement fit-for-purpose tools across the security product landscape 
Present risk, incident learnings and security strategy to executive and non-technical stakeholders in clear, practical language 
Contribute to the current roadmap while helping shape the 2027–2029 security strategy 

Your fit

• You’ll bring:
• Strong hands-on Security Engineering experience in complex environments
• Mandatory depth across the Microsoft Security Suite
• Experience with SIEM, EDR/XDR, identity security, endpoint controls, cloud security and email security
• Incident response experience, including investigation, containment, recovery and post-incident improvement
• Exposure to Purple Team, Red Team, penetration testing or control validation activity
• Confidence leading technical project work through engineers and wider stakeholders
• Ability to explain security requirements in plain English and build trust quickly
• A practical mindset: you care about tested controls, measurable improvement and solutions that work in the real world

Remuneration
If you want a senior security role with engineering depth, incident leadership and genuine strategic input, apply now. The base wage is up to $155,000 plus kiwisaaver. Sorry we can not accept anyone who require work visas now or into the future...