Senior Security Engineer

About Us

We are Foodstuffs North Island Limited, the proud operators of New Zealand's well-known retail brands such as New World, PAK’nSAVE, and Four Square, with over 300 stores and more than 24,000 employees in the North Island. Our support centre employs 1,000+ staff, including 300+ IT professionals who ensure the smooth functioning of our systems.

Role Overview

As a Senior Security Engineer, you will be an integral part of a high-performance IT Operations team focused on customer needs. Your responsibilities span comprehensive IT security within our hybrid multi-cloud infrastructure across the Co-op.

Key Responsibilities

• Develop and advance security strategies centered on Zero Trust models, cloud security architectures, threat-informed defenses, and continuous assurance frameworks.
• Oversee proactive threat intelligence, vulnerability management, and reduce attack surfaces by utilizing automation and AI-driven tools.
• Lead security incident response efforts, including conducting threat-informed exercises to bolster organizational preparedness.
• Manage vendor and SaaS-related security requirements, enforcing supply-chain security, software bill of materials (SBOM) validation, and vendor assurance protocols.
• Promote DevSecOps methodologies encompassing secure CI/CD, container security, infrastructure-as-code (IaC) validation, and policy-as-code enforcement.
• Participate in an on-call security response rotation as necessary.

Candidate Profile

We seek a detail-oriented security professional passionate about risk mitigation and system protection, with solid hands-on expertise in enterprise security engineering within hybrid or multi-cloud environments. You should possess deep knowledge of digital security technologies and contemporary cybersecurity policies and best practices.

• Proficiency in Zero Trust architectures, cloud security, identity governance, API security, and modern security frameworks.
• Strong technical experience with SIEM, SOAR, EDR, vulnerability scanning, container protection, and automation technologies.
• Capability to guide architecture and development teams toward secure system design.
• Familiarity with infrastructure as code (IaC), continuous integration/continuous deployment (CI/CD) pipelines, and secure cloud deployment patterns.
• Excellent analytical, investigative, and forensic skills across both cloud and on-premises systems.

You must communicate effectively with both technical and non-technical audiences, thrive in collaborative environments while independently driving results, and have a strong desire for continuous learning and improvement. We value diverse experiences and encourage applications from candidates who may not meet every criterion but believe this role aligns with their aspirations.

Benefits and Workplace Culture

• Complimentary car parking with over 1,000 spaces including electric vehicle charging points.
• Southern Cross health insurance coverage.
• Onsite café offering subsidized meals, an in-house mini mart, and a 5% discount at our retail outlets.
• Flexible work arrangements, a paid day off for your birthday, and long service leave options.
• Access to in-house development programs, flu vaccination clinics, and participation in employee social groups known as Tribes.

Diversity and Accessibility

We embrace diversity and inclusivity, encouraging all applicants including those with disabilities, additional health or mental health needs, or neurodiversity. Accessibility support is available upon request throughout the recruitment process.

Recruitment Process

We may utilize AI tools to assist in evaluating candidate applications and materials; however, all final decisions are made by human recruiters to ensure fairness and accuracy.