Senior Cybersecurity Engineer (Cyber Threat Intelligence & Response)

Location: Fully remote, but must be based in New Zealand and have full working rights there.

Company

hirify.global develops vertical software, embedded payments, and AI-powered capabilities for fitness, recreation, golf and club, field services, laundry, education, and other membership-based and service-based industries.

What you will do

• Own security incidents from detection and triage through investigation, containment, eradication, recovery, and final reporting.
• Lead investigations across logs, endpoints, email, network data, operating systems, and applications, including host and network forensics, malware triage, and document analysis.
• Coordinate incident response with engineering, IT, security teams, and leadership, communicating technical risks clearly.
• Proactively hunt for threats using system logs, user behaviour, and threat intelligence, and develop detections and indicators of compromise.
• Build and automate incident response workflows and playbooks; strengthen detection coverage with MITRE ATT&CK and reduce monitoring noise.
• Analyse emerging threats, recommend mitigations, and provide on-call and out-of-hours incident coverage when required.

Requirements

• 3–6 years of experience in security operations or incident response, with hands-on ownership of incidents rather than queue monitoring only.
• Experience managing the full incident-handling lifecycle and making sound decisions under pressure.
• Strong triage and root cause analysis skills, including correlating HTTP, SMTP, network, and other log sources.
• Ability to read logs and work with Windows, Active Directory, common operating systems, and servers.
• Hands-on SIEM experience for investigation, threat hunting, and detection development; Microsoft Sentinel and KQL are preferred.
• Practical experience with EDR, advanced threat protection, identity management, and API security.
• Threat-hunting experience across network flow, user behaviour, and threat intelligence, including detection and containment through scripting, analytics, and automation.
• Knowledge of attacker tools and techniques, Cyber Kill Chain analysis, ITIL processes, ISO 27001, and PCI DSS, including change, incident, and problem management.
• Independent, self-directed problem solving and strong verbal and written communication skills for technical and leadership audiences.

Nice to have

• Malware analysis experience.
• GCIH, GCFA, AZ-500, or SC-100 certification.
• Experience with Jupyter Notebooks for threat hunting.
• Python and PowerShell scripting.
• Experience building and tuning SOAR automation for response.

Culture & Benefits

• Values include finding a better way, doing the right thing, communicating directly, winning together, and owning outcomes.
• Global colleague network, mentorship, diversity and inclusion initiatives, and opportunities to grow.
• Paid parental leave, three additional volunteer days, and free mental health support.
• Flexible working arrangements.
• Remote work includes on-call and out-of-hours coverage when incidents arise.
• Employment requires legal work authorisation; contractor and Employer of Record arrangements are not available, and visa sponsorship is not offered.

Hiring process

• Submit a resume through the careers portal or an external job board; emailed applications are not accepted.
• Include the word “moonshot” at the top of the message to the Hiring Manager and complete the screening questions.
• Successful candidates complete background and identity verification checks; video interviews may be recorded during the active hiring process.