Security Engineer

For more than 65 years, Kordia has proudly kept New Zealanders and their businesses safe, connected and ready for the future. Operating across New Zealand, Australia and the Pacific, we deliver mission-critical solutions spanning broadcasting, telecommunications infrastructure, maritime communications, cloud and cyber security. With a talented team of more than 450 experts, we’re trusted by many of New Zealand’s largest organisations to protect what matters most.

Ko tā mātou mahi - About the role

Kordia is looking for a Security Engineer with a primary focus on managed detection and response (MDR). You will design, implement and continually improve the security platforms that protect our customers and support Kordia’s MDR services.

Working across customer environments, you’ll combine hands-on engineering with operational support, primarily across Microsoft Sentinel, Microsoft Defender and the Azure environment that supports them. You’ll deliver customer onboarding and security projects, troubleshoot complex technical issues and help keep our MDR services secure, resilient and reliable.

This role suits an engineer who enjoys solving technical problems, takes a structured approach to security and wants to deepen their Microsoft security expertise. You’ll work closely with customers, our Security Operations Centre (SOC), Cloud Engineering, vendors and the wider Security Engineering team to improve how we deliver MDR.

Ko tō mahi - What you will do

Reporting to the Security Engineering Lead within Managed Services, you’ll provide hands-on engineering expertise for the design, implementation, support and improvement of Kordia’s MDR platforms and customer security solutions.

What you’ll be responsible for:

• Design, configure, implement and support Microsoft Sentinel, Microsoft Defender and related Azure security components across customer environments.
• Deliver MDR customer onboarding, platform deployments and engineering changes to agreed quality, scope and timeframes.
• Onboard security data sources and develop, maintain and troubleshoot connectors and integrations, working with Cloud Engineering where responsibilities intersect.
• Investigate and resolve complex platform, telemetry and integration issues, supporting incident investigations and remediation where engineering input is needed.
• Apply secure-by-design principles and identify and escalate security risks and vulnerabilities.
• Work with the SOC to improve detection rules, alert quality, tuning, enrichment and automation, as well as service performance and operational efficiency.
• Provide clear technical guidance to customers and stakeholders, including during Sentinel and Defender deployments, optimisation and security uplift engagements.
• Document engineering changes, share knowledge across teams and keep pace with emerging threats and technologies.

Nā tōu rourou - What you will bring

• Sound experience in cyber security, cloud, systems or infrastructure engineering, preferably supporting security monitoring or MDR services.
• Hands-on experience implementing, administering or troubleshooting Microsoft Sentinel and Microsoft Defender in enterprise or customer environments.
• Practical Azure security experience, including security data-source onboarding and troubleshooting connectors, integrations and telemetry.
• Sound knowledge of cyber security principles, including defence-in-depth, identity and access management, security monitoring, detection and incident response.
• Strong analytical and troubleshooting capability, with a structured approach to resolving technical issues in live customer environments.
• Experience with incident, problem, change and service management processes.
• The ability to communicate technical concepts clearly, work collaboratively with the SOC and engineering teams, and build trusted customer relationships.
• A relevant tertiary qualification or equivalent industry experience. Microsoft SC-200, AZ-500 or equivalent certifications are desirable.
• Experience with Microsoft Defender for Endpoint and other Defender capabilities, such as Defender for Identity, Defender for Office 365 or Defender for Cloud Apps, is advantageous.
• Exposure to other EDR/XDR platforms, such as CrowdStrike, and to detection tuning, automation, scripting or GitHub is advantageous.
• The ability to participate in an on-call roster where required and obtain relevant customer or government security clearances.

Nōu te rourou - Why join us?

This is an opportunity to build your security engineering capability with a clear focus on MDR, Microsoft Sentinel and Defender. You’ll work on customer deployments and live managed security services, giving you exposure to the full lifecycle of security solutions, from onboarding and engineering through to ongoing improvement.

Alongside this, Kordia offers matched employer superannuation contributions of up to 5%, learning and development support, internal career pathways, flexible working, enhanced parental leave, wellbeing initiatives and insurance benefits.