Job Description

• Wellington based role with hybrid flexibility
• Strong learning, development, and career progression opportunities
• Exposure to complex national IT and OT environments supporting essential services

He whakamārama mō te tūranga mahi | About the role:

With a strong focus on endpoint security, you will be responsible for monitoring and maintaining protection across servers, workloads, and devices. You will ensure agent health, compliance, and continuous protection, while proactively identifying and addressing cyber threats.

Your responsibilities will include:

• Monitoring, investigating, and responding to cybersecurity incidents and events
• Identifying vulnerabilities and collaborating with internal teams and external suppliers to resolve security issues and reduce future risk
• Providing practical cybersecurity guidance to projects and operational teams to ensure systems are securely designed, deployed, and maintained
• Managing small security uplift initiatives that strengthen KiwiRail’s overall cybersecurity posture
• Participating in a 24/7 on-call roster during assigned periods

This role offers exposure to complex, nationally significant IT and OT environments and the opportunity to make a meaningful impact on essential services.

Ngā pukenga e rapu nei mātou | What you will bring:

We’re looking for someone who is curious, hands-on, and committed to strong security outcomes.

• At least 5 years’ experience in cyber operations, incident management, or a related field
• Strong background in infrastructure, systems, network, or server administration
• Proven experience analysing and resolving complex security issues
• Solid knowledge of endpoint security, incident response, and vulnerability management
• Experience with security tools such as EDR, SIEM, IDAM, or PAM platforms
• Understanding of cybersecurity frameworks and standards including ISO 27001, NIST, NZISM, IEC 62443, or PCI DSS
• Ability to assess risk, prioritise issues, and support effective remediation
• Strong communication skills and the ability to collaborate confidently with technical teams, suppliers, and business stakeholders
• A collaborative mindset and a proactive, self-directed approach
• A relevant ICT qualification or equivalent practical experience

Experience with Operational Technology (OT), ICS/SCADA environments, or automation tools such as FortiSOAR would be an advantage.

Nōu te rourou | What’s in it for you:

• Competitive salary plus 4% employer KiwiSaver contribution
• Staff-discounted Southern Cross medical insurance
• Discounted staff travel and retail partner benefits
• Access to the NZ Rail Staff Welfare Trust
• Ongoing learning, professional development, and clear career progression pathways
• Exposure to a fast-moving cybersecurity landscape across a national transport network
• A supportive, collaborative team that values your expertise and contribution

Kua rite, kia rite | Ready to Make a Difference?

If you are ready to strengthen KiwiRail’s cybersecurity capability and help protect the systems that keep New Zealand moving, we would like to hear from you.

Bring your technical expertise, your problem-solving mindset, and your commitment to safer, stronger operations.

Apply today and join us in building Stronger Connections for a Better New Zealand.

Rā aukati | Applications close: 29 May 2026 (Unless filled sooner)

Successful candidates must pass a pre-employment medical and drug screen

Applicants must hold New Zealand residency or citizenship

KiwiRail is committed to creating an inclusive and supportive workplace where everyone can feel valued and respected. We welcome applications from people of all backgrounds, abilities, and experiences because together we are stronger.