Auckland / / Security Operations Lead

Mercury is a bold future-focused organisation, providing energy and telecommunications to more Kiwis than anyone else, leading the way with renewable energy and working toward a sustainable future. At the heart is our purpose. Taking care of tomorrow : connecting people and place today. This pushes us to do all we can to create a better future for our people, our communities, and Aotearoa New Zealand.

In this role, you will report directly to the Cyber Security Manager and lead a team of three Security Analysts within the Security Operations domain. Your responsibilities will encompass driving Mercury's evolution toward a proactive, intelligence-driven Security Operations Center leveraging automation, AI / ML, and advanced analytics. You'll architect next-generation detection, investigation, and response capabilities while ensuring the highest standards of protection for our critical energy infrastructure. This is more than just a job; it's a chance to transform reactive security operations into predictive, automated threat defence. If you're seeking a role that combines deep technical incident response expertise with leadership and strategic vision and the opportunity to make a lasting impact on New Zealand's energy security, we invite you to apply.

Tāu e mahi ai | What you'll be doing :

• Collaborate with various teams to provide technical leadership and guidance for monitoring and responding to incidents, enforcing policies and conducting risk assessments.
• Provide leadership to your team, including providing opportunities for ongoing development in a learning culture.
• Lead the implementation of integrated security stack (SIEM, SOAR, EDR) and develop automated incident response playbooks for common threats including ransomware and OT / ICS-specific incidents.
• Establish threat hunting programs using MITRE ATT&CK framework and conduct purple team exercises to test and refine detection capabilities specific to energy sector threats.
• Maintain exposure and vulnerability management capability with risk-based prioritisation, including OT / ICS vulnerability management using non-intrusive methods.
• Develop and maintain threat intelligence platform with automated enrichment pipelines, creating industry-specific threat profiles for nation-state and ransomware actors targeting utilities.
• Provide leadership to your team through mentorship and development opportunities, while participating in on-call roster and managing security operations KPIs.

Based in our Newmarket offices, we strongly support a hybrid working model where you will have the opportunity to work from home and within our purpose-built premises, recognising the value of this flexibility in the modern world. This hybrid role team currently spend three days in the office and two days working from home.

Ideally you will have experience in the following, or a mix of :

Mercury is a learning organisation that is committed to providing you with opportunities to grow and develop that will benefit you now and in the future. Part of your role includes building your skillset and mindset through a variety of ways. We believe this creates an energised, innovative and agile work environment where you will feel valued.

Every voice has its place – and together, we thrive.

At Mercury, we believe that having a team of individuals with different backgrounds, experience and capability working together makes us stronger and better as an organisation. We know that some candidates may only apply for a role if they meet all of the criteria. If you want to join our team, we encourage you to apply for any role that matches your skills, capabilities and interests, even if you aren't sure if you meet all of the criteria.

Please click 'apply' to submit your application. If you require accessibility or assistance support from us during the application and selection process, please reach out to . Please do not apply via this email address.

A full position description is available below. Applications close Wednesday, 3rd December at 5 : 00pm. Please note that Mercury retains the right to bring a particularly strong candidate through to interview more quickly.

#J-18808-Ljbffr