Vulnerability Engineer

Work from anywhere in New Zealand, with remote working availableJoin our national Cyber Protection and Response teamBuild smarter vulnerability management through automation, scripting and technologyHealth New Zealand | Te Whatu Ora is firmly grounded in the principles of Te Tiriti o Waitangi and is committed to building a health system that serves all New Zealanders. Through integration and collaboration, we're creating a nationally connected health system that delivers equitable, high-quality care for the people of Aotearoa.These are flexible location roles and can be based at any Health New Zealand office across New Zealand with option to work remotely for the right candidate.About the roleWe have two exciting opportunities for Vulnerability Engineers to join our Vulnerability Management team within Cyber Protection and Response.This is a hands-on engineering role where you'll help strengthen Health New Zealand's national vulnerability management capability. You'll work across our technology environment to identify vulnerabilities, improve scanning and remediation processes, and build automation that helps our teams respond to security risks more effectively.We're looking for someone who can take a broad view of the cyber threat landscape, understand how emerging vulnerabilities could impact our environment, and turn that knowledge into practical technical solutions.You'll have the opportunity to work across a wide range of infrastructure, including cloud, Windows, Linux and networking environments. You'll also partner with our infrastructure and patch management teams to support remediation and help ensure vulnerabilities are addressed effectively.A big part of the role will be finding ways to work smarter - whether that's through scripting, automation, integrating security tools or improving existing workflows. You'll have the freedom to bring your ideas to the table, explore new approaches and make a real impact.About the TeamThe National Cyber Security team is responsible for protecting Health New Zealand's digital environment while enabling the safe delivery of healthcare services across the country.The Vulnerability Management team sits within Cyber Protection and Response and plays a key role in identifying, prioritising and reducing cyber security risks across a complex national technology environment.We're a collaborative and open team that values knowledge sharing, continuous improvement and practical problem-solving. You'll have the opportunity to work with a wide range of technical teams and contribute to meaningful work that strengthens cyber security across Aotearoa.What you'll bringWe're looking for someone with a strong cybersecurity foundation, practical vulnerability management experience and a genuine interest in automation and solving technical challenges. You'll be confident working across technical environments, developing automation and explaining complex security issues in a clear and straightforward way.You will also bring:3-5 years' experience in vulnerability management, security engineering, security tooling, DevSecOps or a related cyber security roleHands-on experience with vulnerability management platforms such as Tenable, Nessus, Qualys or equivalentStrong experience identifying, assessing, prioritising and managing vulnerabilities through to remediationExperience with scripting and automation using Python, PowerShell or similarExperience across cloud, Windows, Linux, networking and infrastructure environmentsAn understanding of cyber threats and how vulnerabilities may affect an organisation's riskExperience integrating security tools, platforms and workflowsThe ability to investigate issues, identify improvements and work independentlyStrong communication skills and confidence engaging with technical teams and senior stakeholdersA curious and motivated approach, with a willingness to learn and keep up with emerging threats and technologiesExperience with infrastructure as code, CI/CD pipelines, SIEM, EDR, Microsoft Defender, Sentinel or cloud security platforms would be an advantage.You'll also need to be able to obtain and maintain the appropriate New Zealand Government security clearance.Working at Health New ZealandHealth New Zealand | Te Whatu Ora is dedicated to ensuring excellent healthcare for the people of Aotearoa through our values of care and respect, collaboration, accountability, innovation, and excellence.We are committed to fostering an inclusive and diverse workforce where everyone feels valued. We welcome applications from all people, including Māori, Pacific Peoples, disabled people, and the Rainbow community.How to ApplyIf you're ready to take the next step in your cybersecurity career and help strengthen our national vulnerability management capability, apply today.All applications must be submitted through our online careers portal by Thursday, 22 October.Please note that if we receive a high number of suitable applications, we may close the role earlier than the advertised closing date.If you have any questions about the role, please contact Ash Mohan at [email protected].

3-5 years in vulnerability management or related cyber security role; experience with Tenable, Nessus, Qualys; scripting with Python or PowerShell; cloud, Windows, Linux, networking; ability to obtain NZ Government security clearance.

Key Responsibilities

• managing vulnerabilities
• building automation
• integrating security tools

Skills & Tools

Tenable, Nessus, Qualys, Python, PowerShell, Microsoft Defender, Sentinel

Job Details

• Category: Information Technology
• Seniority: Mid Level
• Commitment: Full Time
• Workplace: Remote — New Zealand
• Languages: English

About Te Whatu Ora

A national health system providing equitable, high-quality care for all New Zealanders. — Industry: Healthcare

Apply Now →