Security (Information & Communication Technology)Are you passionate about safeguarding and protecting organizations from evolving cyber threats? We are seeking a skilled Cyber Security Specialist to join our Security Operations team, specializing in Microsoft Sentinel.Ko ta matou mahi - About the roleThe Cyber Security Specialist is a subject matter expert in supporting the technical managed security services for our customers. This includes onboarding new customers, analysing, evaluating, optimising, and constantly improving the service(s) for our customers.The Security Specialist is also responsible for supporting Security Analysts and Senior Security Analysts with advanced analysis and investigation of security incidents, additionally making and implementing recommendations to improve the security posture of our customers is essential.You will play a crucial role in advising upon escalated investigations, performing ad-hoc configuration updates, and working extensively with Microsoft Sentinel. Knowledge of integrating Defender with Sentinel, along with proficiency in KQL and developing use cases, is essential.This role will primarily focus on Microsoft Defender suites such as MDE, MDO, and MDCA. The ideal candidate will excel in onboarding and implementing configurations, conducting defender reviews according to best practices, and optimising threat hunting rules for Defenders. Additional skills in security orchestration, automation and response would be a definite plus (Particularly within Sentinel).Ko to mahi – What you will doAct as technical SME of select (or all) Managed Security Services products and service offeringsMeet advanced technical training and certification requirementsTechnical input into service creationParticipate in technology vendor training, governance calls and forumsDevelop and implement continual service improvement enhancementsDevelop operational configurations and automation of all in-place security solutionsWork with security vendors to ensure the products used are maintained and enhanced to fully meet changing operational requirementsOwnership of the outcome of the technical transition projects to new customersProvide advanced technical and response of security alerts, detections, and eventsResponsible for identifying continual service improvement initiatives, including automation and orchestration to remove toilWork with the Cyber Defence Operations analysts to support escalated events and incidents of interest and carry out advance analysis and triage, implement Cyber Incident Response Plans and playbooks as appropriate to resolution and reportingMonitor managed security service solutions for continuous improvement opportunities.Na tou rourou - What you will bringThe ideal candidate will be responsible for performing incident triage, identifying improvement opportunities, and providing recommendations for automated playbook development. In this role, you will also mentor junior analysts, guiding them through the process of incident investigations and response. Strong experience in threat analysis, security monitoring, KPI tracking and hands-on expertise with Microsoft Sentinel is essential.You will have a few years under your belt in either a corporate or MSSP environment, with:Experience in all Microsoft 365 defender suites and Microsoft Sentinel.Strong understanding of SIEM and SOAR capabilities.Sound knowledge of attack techniques and MITRE framework and how it can be used in relation to detection rules.Cloud knowledge, preferably with experience with Microsoft ecosystem including Azure.A broad understanding of security appliances used by typical enterprise customers.Relevant security qualifications (e.g. AZ-500, MS-102, SC-200).An analytical, open minded, fast learning team player with a positive attitude.A knowledge of networking fundamentals is desirable.Basic system administration experience or knowledge is essential.Experience in an operational environment is desirable.Excellent problem-solving skills and the ability to think critically in high-pressure situations.Strong communication skills to effectively collaborate with technical and non-technical stakeholders.At Kordia, we believe every team member has a role to play in the overall success of the business, whether it is through our working relationships, technology or skills. Our culture and values encourage and reward those that are collaborative, trustworthy, humble, courageous and experts.Kordia is an NZ Immigration Accredited Employer and have welcomed a diverse group of people from all over the world. We embrace gender equality and are committed to providing a supportive, diverse and inclusive work environment where people thrive.Me pehea te tono - How to applyAll applicants be a New Zealand Citizen or Resident or hold a valid work visa to legally work in New Zealand immediately. (Please detail your visa status as part of the application process). Be willing to undergo police vetting and any other checks relevant to the role.We appreciate every application but due to the high volumes received, we will only be contacting candidates who meet the specified criteria and are selected for further consideration.
#J-18808-Ljbffr