Senior Cybersecurity Engineer

Kia ora!

At Air New Zealand, we are building back better as we connect friends and whānau all over Aotearoa to each other and reconnect Kiwi's to the World. Air New Zealand's cyber security team provides assurance that the confidentiality, integrity and availability of our Information Assets and Systems is maintained.

We are looking for a driven Senior Cybersecurity Engineer (Internal Job Title: Senior Cybersecurity Specialist) to assist the team with security monitoring, threat intelligence and to provide modelling security requirements and metrics to ensure the business is protected and supported in complying with procedures, regulations and standards.

What will you be working on?

• Conduct security assessments against Air New Zealand assets, such as Web and Mobile Applications, API's and Infrastructure
• Collaborate on security testing needs with a focus on scoping test boundaries and defining rules of engagement and entry requirements
• Review Security Assurance reports, liaise with development teams, risk teams and the broader Cyber team
• Coordinating penetration tests with internal and external stakeholders across the business, and work with external security partners to manage penetration testing end-to-end
• Provide input and SME guidance on adapting and maintaining the security assurance program as priorities and threats evolve
• Assist in security monitoring, threat and vulnerability management activities across functions
• Participate in the security incident response process to ensure issues are addressed and resolved effectively to enable business outcomes to be achieved.
• Provide analytical support for regular reporting and to the Digital function through research and analysis of security metrics/measures, incidents and events/alerts (e.g. via SIEM) to ensure best practice and expertise are provided to enable system creation and business protection.
• Assist in the management of security compliance and compliance audit processes and security assessments and risk analysis to ensure any issues are identified and rectified.

To be successful in this role we are looking for the following:

• 3-5 years' experience in a technical penetration testing role, or similar
• Experience in Penetration Testing of web-based applications or API's
• Strong knowledge in OWASP and other security testing frameworks
• Experience with commonly used Penetration Testing tools and methodologies, incl Burp Suite, Kali, Tenable, Metasploit and Malware Analysis tooling
• Experience with SCA/SAST and Digital Forensics tools is also desirable but not essential
• A track record of taking ownership of streams of work and delivering to completion.
• Enthusiasm to elevate cyber security within a business and the communication skills to enable you to do this well. Excellent interpersonal/communication skills, both verbal and written
• A can-do attitude with high levels of initiative. You see an issue, work with the team to brainstorm solutions and then work to deliver solutions at pace.
• A passion for cyber security that translates into keeping up to date with trends within the field
• Practical experience within several of the following areas: penetration testing, security monitoring, threat/vulnerability/risk analysis, risk assessment and threat assessment methodologies and security processes network and security devices/systems is also desirable but not essential
• Able to create and deliver the Security Assurance/Pen Testing program and activities
• Working knowledge of implementing or testing security in Cloud Platforms

Passionate and looking to expand your existing Cyber security experience? Apply online now!