Principal DFIR Analyst - Cyber Security

Health New Zealand | Te Whatu Ora is the country's largest employer, delivering universal public healthcare to 5 million New Zealanders.

We provide essential hospital, specialist, and community health services across 80+ locations — from large urban centres to rural towns and remote communities.

Our goal is to improve health outcomes for all New Zealanders by delivering equitable, accessible and innovative care.

About the Role

The Principal Digital Forensic Incident Response (DFIR) Analyst at Health New Zealand is a senior leadership position responsible for protecting the health system from complex and high-impact cyber threats. You will lead the national response to major cyber incidents, applying deep expertise in digital forensics, incident response, and threat intelligence to ensure risks are swiftly contained and patient safety is safeguarded. As the senior escalation point for the National Security Operations Centre (NSOC), you will oversee complex investigations, set the strategic direction for DFIR practices, and drive continuous improvement of national capabilities. This includes mentoring analysts, advancing methodologies and tooling, and fostering a culture of innovation and collaboration across the cyber security function. The role demands a proven leader with advanced technical mastery, exceptional communication skills, and the ability to influence strategy while remaining hands‑on in high‑pressure response environments.

About the Team

You'll be part of Health New Zealand's National Cyber Security team, working at the forefront of protecting our health system and patient data from evolving cyber threats. The team brings together experts in digital forensics, incident response, threat intelligence, and security operations within the National Security Operations Centre (NSOC). Collaborating across technical and clinical environments, the team operates in a supportive, high‑trust culture that values continuous learning, innovation, and collective resilience in safeguarding the nation's critical health infrastructure.

About you

You're a seasoned cyber security professional with a strong technical foundation and proven leadership in digital forensics and incident response. With over a decade of hands‑on experience managing complex and high‑impact cyber incidents, you bring both strategic insight and practical expertise. You're confident guiding teams through critical situations, influencing national‑level security practices, and fostering continuous improvement.

• Postgraduate qualification in Cyber Security (or equivalent) and recognised professional certifications (e.g., SANS GCIH, GMON, GCED, BTLO, CompTIA Security+, CySA+).
• 10+ years' experience in Security Operations, including leadership in major incident response, digital forensics, and threat detection.
• Proven ability to lead and develop high‑performing technical teams, fostering capability and professional growth.
• Advanced proficiency in SIEM, EDR, and digital forensics tooling, with deep knowledge of threat actor TTPs and incident lifecycle management.
• Strong communication and strategic leadership skills, with the ability to influence cyber defence practices at scale.

Working for Health New Zealand

Health New Zealand | Te Whatu Ora is ‘the weaving of wellness'. We're dedicated to ensuring excellent healthcare for the people of Aotearoa / New Zealand. The Equity Work Programme at Health NZ focuses on helping everyone in the health system think about equity when they do their work. It also promotes the cultural change needed for the whole system to reach equity in health outcomes.

Our people are at the heart of everything we do. Health New Zealand are committed to being good employers and honouring our equal employment opportunity obligations.

Our commitment to equity, diversity and inclusion

How to Apply

To view the position description and / or apply for the role please click “apply now.” All applications must be submitted through our online careers' portal before 11 : 59pm on Tuesday 11th of November. If you have any questions about the role, please contact Roshni George at .

Whilst Health New Zealand is undergoing change, affected employees will be given preference and priority for this position.

Job details

Job Reference :

Job Reference : HNZ /

Location :

New Zealand - All Locations - Work from where you are

Job type :

Job type : Permanent Full time

Expertise :

Non-clinical - Information Technology - Information Technology

#J-18808-Ljbffr