Exposure Management Analyst

For more than 65 years, Kordia has proudly kept New Zealanders and their businesses safe, connected and ready for the future. Operating across New Zealand, Australia and the Pacific, we deliver mission-critical solutions spanning broadcasting, telecommunications infrastructure, maritime communications, cloud and cyber security.

Our cyber security team works with organisations across New Zealand to understand their risk, strengthen their security posture and respond to an increasingly complex threat environment.

Ko tā mātou mahi – About the role

We’re looking for an Exposure Management Analyst to join our Kordia Security Operations Centre.

This is a hands-on cyber security role focused on identifying, understanding and helping remediate vulnerabilities and security exposures across a broad range of customer environments, including traditional IT, cloud, OT, web applications, identity and AI.

You’ll work with security tools to analyse vulnerability and exposure, investigate findings, determine what presents the greatest risk, and provide practical recommendations to customers.

You’ll help customers understand what the findings mean, what they should prioritise and how they can improve their overall security posture. You’ll also track remediation activity and build strong relationships with the customers you support.

Ko tō mahi – What you’ll do

You’ll be involved across the day-to-day delivery and ongoing development of our Continuous Threat Exposure Management service, including:

• Performing vulnerability and exposure assessments across on-premise IT, OT, cloud, AI, identity and web application environments.
• Analysing and prioritising vulnerabilities, misconfigurations and security control gaps.
• Investigating findings and providing practical remediation recommendations.
• Creating and presenting clear customer reports that explain risk and recommended actions.
• Working directly with customers to track remediation and improve their security posture.
• Deploying and supporting vulnerability scanners, agents and related security tools.
• Creating threat advisories and helping manage emerging threats through their lifecycle.
• Contributing to service metrics, continuous improvement and the development of our exposure management capability.
• Working closely with teams across Kordia Cyber, including SOC, MDR and DFIR.

Nā tōu rourou – What you’ll bring

We’re looking for someone with a strong technical foundation and a genuine interest in vulnerability and exposure management. You’ll ideally bring:

• Around two years’ experience in a Security Analyst, Systems Administrator or similar technical role.
• The ability to explain technical security issues clearly to customers and non-technical stakeholders.
• A good understanding of IT infrastructure and how vulnerabilities can affect servers, endpoints, networks, and cloud environments.
• An interest in vulnerability management, exposure management and the wider cyber threat landscape.
• Strong analytical skills and attention to detail.
• Confidence investigating technical issues and turning findings into practical recommendations.
• Good written and verbal communication skills.
• A customer-focused approach and confidence building relationships.
• The ability to manage competing priorities and work both independently and as part of a team.
• Some scripting capability would be useful, but isn’t essential.

You don’t need to know every exposure management tool on day one. What matters is that you understand the fundamentals, enjoy investigating how systems can be exposed, and are keen to keep building your technical cyber security capability.

Nōu te rourou – Why join us?

This is a great opportunity to build deeper capability in an area of cyber security that is becoming increasingly important. You’ll work with a broad range of customer environments and security technologies, alongside experienced cyber professionals across vulnerability management, SOC, MDR and incident response.

You’ll have the opportunity to build your technical expertise, stay close to emerging vulnerabilities and threats, and see the direct impact your work has on improving customer security.

Alongside this, Kordia offers matched employer superannuation contributions of up to 5%, learning and development support, internal career pathways, flexible working, enhanced parental leave, wellbeing initiatives and insurance benefits.