Vulnerability Engineer

• Work from anywhere in New Zealand, with remote working available
• Join our national Cyber Protection and Response team
• Build smarter vulnerability management through automation, scripting and technology

Health New Zealand | Te Whatu Ora is firmly grounded in the principles of Te Tiriti o Waitangi and is committed to building a health system that serves all New Zealanders. Through integration and collaboration, we're creating a nationally connected health system that delivers equitable, high-quality care for the people of Aotearoa.

These are flexible location roles and can be based at any Health New Zealand office across New Zealand with option to work remotely for the right candidate.

About the role

We have two exciting opportunities for Vulnerability Engineers to join our Vulnerability Management team within Cyber Protection and Response.

This is a hands-on engineering role where you'll help strengthen Health New Zealand's national vulnerability management capability. You'll work across our technology environment to identify vulnerabilities, improve scanning and remediation processes, and build automation that helps our teams respond to security risks more effectively.

We're looking for someone who can take a broad view of the cyber threat landscape, understand how emerging vulnerabilities could impact our environment, and turn that knowledge into practical technical solutions.

You'll have the opportunity to work across a wide range of infrastructure, including cloud, Windows, Linux and networking environments. You'll also partner with our infrastructure and patch management teams to support remediation and help ensure vulnerabilities are addressed effectively.

A big part of the role will be finding ways to work smarter - whether that's through scripting, automation, integrating security tools or improving existing workflows. You'll have the freedom to bring your ideas to the table, explore new approaches and make a real impact.

About the Team

The National Cyber Security team is responsible for protecting Health New Zealand's digital environment while enabling the safe delivery of healthcare services across the country.

The Vulnerability Management team sits within Cyber Protection and Response and plays a key role in identifying, prioritising and reducing cyber security risks across a complex national technology environment.

We're a collaborative and open team that values knowledge sharing, continuous improvement and practical problem-solving. You'll have the opportunity to work with a wide range of technical teams and contribute to meaningful work that strengthens cyber security across Aotearoa.

What you'll bring

We're looking for someone with a strong cybersecurity foundation, practical vulnerability management experience and a genuine interest in automation and solving technical challenges. You'll be confident working across technical environments, developing automation and explaining complex security issues in a clear and straightforward way.

You will also bring:

• 3-5 years' experience in vulnerability management, security engineering, security tooling, DevSecOps or a related cyber security role
• Hands-on experience with vulnerability management platforms such as Tenable, Nessus, Qualys or equivalent
• Strong experience identifying, assessing, prioritising and managing vulnerabilities through to remediation
• Experience with scripting and automation using Python, PowerShell or similar
• Experience across cloud, Windows, Linux, networking and infrastructure environments
• An understanding of cyber threats and how vulnerabilities may affect an organisation's risk
• Experience integrating security tools, platforms and workflows
• The ability to investigate issues, identify improvements and work independently
• Strong communication skills and confidence engaging with technical teams and senior stakeholders
• A curious and motivated approach, with a willingness to learn and keep up with emerging threats and technologies

Experience with infrastructure as code, CI/CD pipelines, SIEM, EDR, Microsoft Defender, Sentinel or cloud security platforms would be an advantage.

You'll also need to be able to obtain and maintain the appropriate New Zealand Government security clearance.

Working at Health New Zealand

Health New Zealand | Te Whatu Ora is dedicated to ensuring excellent healthcare for the people of Aotearoa through our values of care and respect, collaboration, accountability, innovation, and excellence.

We are committed to fostering an inclusive and diverse workforce where everyone feels valued. We welcome applications from all people, including Māori, Pacific Peoples, disabled people, and the Rainbow community.

How to Apply

If you're ready to take the next step in your cybersecurity career and help strengthen our national vulnerability management capability, apply today.

All applications must be submitted through our online careers portal by Thursday, 22 October.

Please note that if we receive a high number of suitable applications, we may close the role earlier than the advertised closing date.

If you have any questions about the role, please contact Ash Mohan at [email protected].