D

DEFEND

Independent cyber security outsourcing and consulting

Operations Lead - Incident Response

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timeWellington, New Zealand

About the Job

Requirements

  • Proven experience leading and coordinating complex incident response engagements across customer environments.
  • Strong hands-on digital forensics and investigative skills across endpoint, network, and cloud environments.
  • Sound working knowledge of incident response frameworks and methodologies such as NIST and SANS, and the judgement to apply them during a live incident.
  • Strong threat hunting skills, including forming and testing hypotheses, reading adversary behaviour, and uncovering threats that bypass preventative controls.
  • Experience using threat intelligence to inform investigations, hunts, and assessments, and to anticipate how adversaries are likely to operate.
  • Ability to identify control gaps and failures exposed by an incident and translate them into concrete recommendations that strengthen an organisation’s defences.
  • Ability to produce clear written reports and brief technical teams and executive stakeholders during and after an incident.
  • Ability to engage stakeholders across technical and business teams and provide steady, trusted advice during an active threat.
  • Ability to manage competing priorities and live incidents simultaneously while keeping deliverables accurate and meeting deadlines.
  • Commitment to continuous improvement by refining documentation, processes, and detections based on engagement learnings.
  • Strong leadership and collaboration skills, including mentoring others, sharing knowledge, and developing team capability.
  • Willingness to assist in adjacent practices when time permits.

Responsibilities

  • Coordinate major cyber incidents from initial investigation through containment and secure recovery.
  • Conduct hands-on complex investigations, examining forensic evidence to determine what happened, the extent of an attacker’s access, and next steps.
  • Use threat intelligence and adversary behaviour to hunt for threats that have bypassed existing controls.
  • Lead compromise assessments and threat hunting to identify current or historic intrusion and help customers understand their exposure and risk.
  • Translate technical findings into clear advice that enables technical teams and executives to make decisions during high-pressure situations.
  • Mentor colleagues and improve incident-response and threat-hunting playbooks, processes, and approaches.

About the Company

DEFEND

Independent cyber security outsourcing and consulting

DEFEND provides outsourced cyber security consulting and managed services across ANZ, covering auditing and compliance (NIST), virtual CISO, cloud/data centre connectivity, network security, secure coding, endpoint protection, threat education, and disaster recovery/business continuity planning. It deploys security professionals who follow standard frameworks to deliver tailored advisory and managed programs, including a procurement service to get the right tools at the best price and ongoing security education. It differentiates itself as an independent, agnostic partner focused on end-user threat management and practical risk reduction, combining cross-domain security expertise with procurement facilitation and C-level guidance in ANZ. Its goal is to help customers access the right people, processes, and technology to prevent and mitigate cyber-attacks and maintain business continuity.

Company size
Not listed
Company stage
Not listed
Total funding
Not listed
Headquarters
Upper Harbour, New Zealand
Founded
2017

Recently Posted Jobs

Explore more opportunities at DEFEND

See more jobs