Security Code Engineer

Kōrero mō te tūranga - About the role

The Digital Delivery Security Team is looking for an experienced Security Code Engineer. This person is someone who can understand and review application and web code, looking for security concerns and gaps that might put our most critical business systems at risk. The successful candidate would be part of the wider DD Security Team, working with them to keep these business systems and information secure from cyber threats. The tools and processes we use, along with our team culture, are industry leading. Our SAFe Agile journey is just moving into an operational phase, and this role will be vital to helping us move forward with this journey.

He pūkenga tou - Skills & Experience
SAFE Agile experience required (but you don't have to be an expert)

Cybersecurity experience:

A strong foundation in cybersecurity principles, concepts, and best practices
Must be able to talk about common types of vulnerabilities, and how they are exploited
Must be able to talk about common tooling used in the field
Experience with SAST / DAST systems
Development experience:

Must have proven experience working in a modern DevSecOps driven development environment
Should have experience developing in a cloud environment (AWS preferred)
Strong communication skills:

Advise on secure development processes
Help teams understand how to resolve identified vulnerabilities
Offer input into application design / architecture to ensure systems are built in accordance with best practice
Support positive engagement with the security team and processes
Communicate complex technical issues to less technical staff
Threat Modelling Techniques:

Mastering various threat modelling methodologies like STRIDE (We use this model), DREAD, or PASTA is essential.
Each technique brings a unique perspective to the analysis, helping you build robust defence strategies.
Nice to have:

Will be able to help build out our monitoring, visibility and detection systems
Experience with NodeJS / Typescript and Kotlin
Familiarity with containerized systems
The expected appointing range for this role is between $120,000 - $140,000, dependent on experience.

Ngā mea e tukuna ana e tātau – What we offer our employees
Interesting work which impacts Aotearoa as we care for whenua, moana and arawai.
Eye & ear care reimbursements
Annual Flu Vaccinations
Reduced Health Insurance Premiums
Diverse groups and networks
If eligible for paid parental leave, you will be entitled to a top up payment for the first 18 weeks of the 26 weeks.
A minimum of four weeks and three days annual leave
Te Tākinatanga - Our Story
Toitū Te Whenua plays a vital role in understanding, developing, and caring for New Zealand's whenua, moana and arawai (land, sea and waterways). Whether you're developing our products and services to support our customers, managing the Crown estate, engaging with our iwi partners, or helping us be an effective regulator, your contribution can make a difference. Our mahi helps New Zealanders have confidence that the development of our land, communities and country is being planned from an informed and expert position that balances environmental, social, cultural, and economic considerations. Now and for future generations.

Our Kia Toipoto Intentions - Public Service Gender, Māori, Pacific and Ethnic Pay Gap Action Plan
Toitū Te Whenua is a diverse team of individuals with different experience and perspectives. This drives our culture and high performance. We know that people from underrepresented groups and women in particular don't apply for roles if they're not a 100% match, but we're not looking for perfection, we're looking for potential. As an inclusive and supportive employer, we value difference and want to encourage anyone interested to apply, regardless of whether you tick all the boxes or not. As an organisation we embrace diversity, encourage work life balance and have a flexible approach to the way we work which means you will quickly feel connected and valued.

Tono mai - How to Apply
If you're eyeing up this role and believe you've got what it takes, please apply, or get in touch with the team. To apply, please click “Apply Online.” You'll be taken through to our Toitū Te Whenua Careers Centre where you'll be able to review further information about the responsibilities and accountabilities of this role in the Position Description. You'll be able to complete your online application form and upload a copy of your CV / Cover Letter. Applications close 26 January 2024, so please apply as soon as possible if you are interested in this position.

For tracking and evaluation purposes, all applications must be submitted via our on-line process. You must have the legal right to live and work in New Zealand to be eligible for this position. You may notice that the Position Description title for this role (Senior Digital Specialist - Level Toru / 3) doesn't match the advertised title. At Toitū Te Whenua we design our roles around shared capabilities (rather than focusing on tasks). This means our position descriptions are broad, one position description can cover many roles, this is known as Broad Based Role (BBR). Using BBR allows us to be responsive to our customers and to strengthen the connections across our organisation. It also gives us the flexibility to provide wider opportunities to our people, to further their careers.

If you have any questions about this role or working at Toitū Te Whenua, please email opportunities@linz.govt.nz and our Recruitment Team will be in touch with you.

#J-18808-Ljbffr