Security Engineer - Detection & Automation
Posted Updated
Summary
Hands-on security engineer at a specialist cyber security firm in Auckland, focused on detection engineering, security automation and integrating tooling across client environments. Day to day: building scripts, API integrations and detection logic, and automating workflows across SIEM, SOAR and EDR/XDR platforms rather than responding to alerts.
About the Client
Our client is a specialist cyber security business working with organisations to strengthen their security capability, visibility and resilience.
They are looking for a hands-on Security Engineer to join their Auckland team, with a strong focus on detection engineering, security automation and integrating security tooling.
This is an opportunity for someone who enjoys building, scripting and automating security capability rather than simply responding to alerts.
About the Role
This role sits at the intersection of cyber security and software engineering.
You will help improve how suspicious and malicious activity is identified, alerted on and, where possible, contained across client environments.
A key part of the role will be automating processes between security platforms, improving data flow and developing tooling that reduces repetitive manual work for security analysts.
This is not a traditional SOC Analyst role!
It will suit someone who enjoys scripting, building integrations, developing detection logic and solving security problems through automation.
Key Responsibilities
You will ideally come from a background in:
Programming & Automation Experience with some of the following:
You are technically curious and enjoy understanding how systems work, then finding ways to make them more efficient, scalable and secure.
You will be:
We review applications as they come in, so apply today with your updated CV and cover letter.
Our client is a specialist cyber security business working with organisations to strengthen their security capability, visibility and resilience.
They are looking for a hands-on Security Engineer to join their Auckland team, with a strong focus on detection engineering, security automation and integrating security tooling.
This is an opportunity for someone who enjoys building, scripting and automating security capability rather than simply responding to alerts.
About the Role
This role sits at the intersection of cyber security and software engineering.
You will help improve how suspicious and malicious activity is identified, alerted on and, where possible, contained across client environments.
A key part of the role will be automating processes between security platforms, improving data flow and developing tooling that reduces repetitive manual work for security analysts.
This is not a traditional SOC Analyst role!
It will suit someone who enjoys scripting, building integrations, developing detection logic and solving security problems through automation.
Key Responsibilities
- Develop and maintain security automation tooling and integrations
- Build scripts and tools to improve security visibility and operational efficiency
- Create, tune and maintain detection logic and threat detection capabilities
- Automate security workflows using APIs, playbooks and security tooling
- Improve data flow between security platforms and technologies
- Support SIEM, SOAR, EDR/XDR and network detection capabilities
- Embed security best practices into development and engineering environments
- Contribute to security architecture and engineering improvements
- Work closely with developers, security analysts and technical teams
- Identify opportunities to automate repetitive security processes
You will ideally come from a background in:
- Security Engineering
- Detection Engineering
- Security Automation
- DevSecOps
- Application Security
- Software Engineering with a strong security focus
Programming & Automation Experience with some of the following:
- Python
- PowerShell
- Ruby
- C or similar programming languages
- API integrations
- Scripting and software development practices
- Databases and data handling
- Workflow automation
- Detection engineering
- Creating and tuning threat detection logic
- KQL / Kusto Query Language
- YARA-L
- SQL or similar query languages
- MITRE ATT&CK
- SIEM and SOAR platforms
- EDR / XDR technologies
- Network detection and monitoring
- CI/CD pipelines
- Cloud-native environments
- DevSecOps
- Application Security / AppSec
- Security tooling integrations
- Security workflow automation
You are technically curious and enjoy understanding how systems work, then finding ways to make them more efficient, scalable and secure.
You will be:
- Hands-on and comfortable working across different technologies
- Strong at problem solving
- Confident scripting and working with APIs
- Comfortable collaborating with developers and engineering teams
- Able to explain technical security concepts clearly
- Naturally focused on automation and continuous improvement
- Interested in building security capability, not just operating existing tools
- Permanent, full-time opportunity
- Hybrid working
- Parnell, Auckland
- Hands-on technical security engineering role
- Exposure across detection engineering, automation, SIEM/SOAR and modern security tooling
- Opportunity to build and improve security capabilities across client environments
- Work within a specialist cyber security environment
We review applications as they come in, so apply today with your updated CV and cover letter.
