Security Analyst

Rare DevSec opening
- 6 month contract
- Central Auckland offices with flexible work
- Rare DevSec opening
- 6 month contract
- Central Auckland offices with flexible work

**About the client**:
Our client is New Zealand's leading electronic payments company, dedicated to providing accessible electronic purchasing options for goods and services. Over the years, they have processed an impressive 16 billion transactions, totaling an estimated $700B, and collaborated with more than 120,000 merchants.

Their network has a strong track record of securely handling digital transactions for the past 25 years. They adhere to PCI compliance standards, ensuring robust security controls to safeguard sensitive cardholder data.

To continue their commitment to safety and security, they are currently seeking a new Security Analyst. This role will play a crucial part in supporting platform operations and development teams, ensuring the delivery of safe, secure, and reliable products, while maintaining the overall security of our network.

**About the role**:
As a Security Analyst, your primary responsibility will be to protect information system assets by identifying and resolving potential security and compliance issues. You will implement security controls and provide support to both the development and operational teams, with a focus on delivering secure technology products and processes.

This role is set in the Technology team reporting to the Information Security Manager. This person will not have any direct reports.

**Role duties**:

- Review and contribute to developer work to ensure secure and compliant outcomes.
- Implement appropriate IT security controls.
- Support the agile delivery of secure products through local and cloud-based infrastructure.
- Design and execute regular assurance tasks to monitor the effectiveness and efficiency of existing security controls.
- Provide security analysis to support architects and developers.
- Handle operational security tasks to ensure ongoing security and compliance.
- Contribute to enhancing security awareness across the organization.

**Your experience**:
We are looking for someone experienced in working within agile product squads, offering security advice and design input for our digital products. You should have a background in modern software development lifecycle management.
- At least 2 years of experience as a Security Analyst in an agile development environment, OR solid experience as a QA/Dev in a previous agile environment.
- Coding skills, preferably in Python,.net, Java, and REST.
- Excellent communication skills at both technical and non-technical levels.
- Experience with PCI DSS is preferred.
- Good understanding of security principles.
- In-depth knowledge and experience of security controls, particularly in a cloud context.
- Familiarity with security design reviews, risk assessments, and PCI assessments.
- Experience with encryption, certificates, and cryptographic concepts.
- Understanding and/or experience with internet/mobile payment gateway, financial or banking systems would be advantageous.
- Familiarity with AWS, Kubernetes, API Gateway, and Terraform would be beneficial.

**The security team**:
The Security team at our company is a dynamic group comprising architects, analysts, and consultants. Despite our diverse backgrounds, we all share a common passion for maintaining the safety and security of our network, which is fueled by fresh coffee

**The wider team**:
In this role, you will collaborate extensively with various stakeholders across the business. This includes working with individuals from different business units and at every level within the organization. Additionally, you will interact with external parties such as consultants, compliance partners and auditors, outsource partners, card schemes, banks, and third-party vendors.

Applicants must have the right to work in New Zealand.