Security Associate - Cyber Defence

About BNZ and the Cyber Defence Team

At BNZ, we foster an agile, energising workplace where innovation shapes our future. Our culture supports wellbeing, flexible working options, and generous leave entitlements, alongside opportunities for career progression and learning. Central to our digital resilience is an expert cyber team dedicated to safeguarding our systems, data, and people against evolving cyber threats.

Our Cyber Defence unit integrates advanced technology with deep expertise to counter authentic cyber attacks, preserving customer trust and operational integrity. You will collaborate across various security domains including operations, threat intelligence, incident response, and engineering, fostering a culture of vigilance, innovation, and ongoing improvement.

This hybrid position is based in Auckland or Wellington, requiring presence onsite Monday, Tuesday, and Thursday, with remote work flexibility on other days.

Role Overview

As a Security Associate within Cyber Defence, you will be part of a close-knit, fast-paced team that values collaboration, continuous learning, and open communication. During incidents, the team remains calm, disciplined, and supportive, emphasizing knowledge sharing to enhance overall defense capabilities.

Key Responsibilities

• Monitor and triage security alerts from SIEM, EDR, and other security tools to detect threats and prioritize investigations.
• Create, develop, and maintain detection use cases using SIEM, EDR, and cloud telemetry data to improve threat detection accuracy and coverage.
• Assist in incident response by investigating incidents, containing threats, gathering evidence, and documenting activities in alignment with established protocols.
• Analyze various security telemetry sources—logs, network traffic, endpoint activity—to identify malicious behavior or compromise indicators.
• Coordinate and support remediation efforts during security incidents in collaboration with internal teams such as technology, engineering, and risk.
• Continuously enhance personal skills and team capabilities through ongoing learning, including leveraging AI-driven security tools to improve alert triage and investigation efficiency.

What Makes This Role Exciting

This role offers the chance to work on impactful cyber security incidents protecting a major financial institution and its customers. You'll receive mentorship from experienced cyber defence professionals and engage with modern security technologies, including AI-enhanced tools, in a highly regulated and meaningful environment.

Team and Company Culture

BNZ fosters a supportive culture with strong benefits including six weeks of annual leave for eligible employees—two weeks more than standard—plus additional wellbeing and lifestyle benefits.

Desired Attributes

• Curiosity and analytical thinking.
• Reliability and adherence to process.
• Ability to stay composed in high-pressure situations.
• A collaborative approach and eagerness to learn.
• Strong attention to detail and clear communication skills.
• Accountability and interest in using AI-assisted security tools responsibly.

Technical Requirements

• Experience in enterprise Cyber Defence operations and/or incident response.
• Proficiency with SIEM and EDR platforms, including alert tuning, detection logic, and telemetry analysis.
• Understanding of incident response processes such as containment, eradication, and recovery.
• Ability to analyze logs, alerts, and basic network or endpoint artifacts.
• Knowledge of common threat types and attack tactics; familiarity with MITRE ATT&CK framework is a plus.
• Interest in adopting AI-driven security tools to enhance investigation quality and efficiency.

Additional Information

The application deadline for this position is Thursday, 13 August at 11:00 pm. BNZ values teamwork, illustrated by the saying: "Success is not the work of an individual, but the work of many." We encourage motivated individuals who resonate with our culture and mission to apply promptly as applications may close early.