Principal DFIR Analyst - Cyber Security

## Mō tēnei tūranga mahi | About this role

• Work anywhere in New Zealand
• Permanent, Full-timeHealth New Zealand | Te Whatu Ora is the country's largest employer, delivering universal public healthcare to 5 million New Zealanders.We provide essential hospital, specialist, and community health services across 80+ locations — from large urban centres to rural towns and remote communities.Our goal is to improve health outcomes for all New Zealanders by delivering equitable, accessible and innovative care.
• About the Role
• The Principal Digital Forensic Incident Response (DFIR) Analyst at Health New Zealand is a senior leadership position responsible for protecting the health system from complex and high-impact cyber threats. You will lead the national response to major cyber incidents, applying deep expertise in digital forensics, incident response, and threat intelligence to ensure risks are swiftly contained and patient safety is safeguarded. As the senior escalation point for the National Security Operations Centre (NSOC), you will oversee complex investigations, set the strategic direction for DFIR practices, and drive continuous improvement of national capabilities. This includes mentoring analysts, advancing methodologies and tooling, and fostering a culture of innovation and collaboration across the cyber security function. The role demands a proven leader with advanced technical mastery, exceptional communication skills, and the ability to influence strategy while remaining hands-on in high-pressure response environments.
• About the Team
• You'll be part of Health New Zealand's National Cyber Security team, working at the forefront of protecting our health system and patient data from evolving cyber threats. The team brings together experts in digital forensics, incident response, threat intelligence, and security operations within the National Security Operations Centre (NSOC). Collaborating across technical and clinical environments, the team operates in a supportive, high-trust culture that values continuous learning, innovation, and collective resilience in safeguarding the nation's critical health infrastructure.
• About you
• You're a seasoned cyber security professional with a strong technical foundation and proven leadership in digital forensics and incident response. With over a decade of hands-on experience managing complex and high-impact cyber incidents, you bring both strategic insight and practical expertise. You're confident guiding teams through critical situations, influencing national-level security practices, and fostering continuous improvement.
• Postgraduate qualification in Cyber Security (or equivalent) and recognised professional certifications (e.g., SANS GCIH, GMON, GCED, BTLO, CompTIA Security+, CySA+).
• 10+ years' experience in Security Operations, including leadership in major incident response, digital forensics, and threat detection.
• Proven ability to lead and develop high-performing technical teams, fostering capability and professional growth.
• Advanced proficiency in SIEM, EDR, and digital forensics tooling, with deep knowledge of threat actor TTPs and incident lifecycle management.
• Strong communication and strategic leadership skills, with the ability to influence cyber defence practices at scale.
• Working for Health New Zealand
• Health New Zealand | Te Whatu Ora is ‘the weaving of wellness'. We're dedicated to ensuring excellent healthcare for the people of Aotearoa / New Zealand. The Equity Work Programme at Health NZ focuses on helping everyone in the health system think about equity when they do their work. It also promotes the cultural change needed for the whole system to reach equity in health outcomes.Our people are at the heart of everything we do. Health New Zealand are committed to being good employers and honouring our equal employment opportunity obligations.
• Our commitment to equity, diversity and inclusion
• We want to see the real you in your application and welcome the real you on board if you come and work with us. Skills are gained across many areas of our life, not just in formal employment. If you can demonstrate the skills listed in the ad, but the experience was gained through whānau life, community or mahi aroha (volunteering) we encourage you to apply and share your story with us in your cover letter.
• We particularly welcome applications from our diverse Māori, Pacific, disabled, and rainbow communities.
• How to Apply
• To view the position description and / or apply for the role please click “apply now.” All applications must be submitted through our online careers' portal before 11 : 59pm on Tuesday 11th of November. If you have any questions about the role, please contact Roshni George at
• Whilst Health New Zealand is undergoing change, affected employees will be given preference and priority for this position.
• | Location : | All Locations || Attachment : | (PDF, 251KB) Job Description |

#J-18808-Ljbffr