Senior Security Engineer at vista-group

Setup: Remote, Hybrid
Location: Waitematā, Auckland
Type: Full-time
Level: Senior
Posted: Jun 22, 2026

Description

The Senior Security Engineer - Cloudflare & Security Platforms at Vista involves owning, engineering, and improving the Vista Cloud's Cloudflare estate as a core security and platform capability. The role focuses on governing, securing, and reliably managing Cloudflare through repeatable engineering practices like infrastructure-as-code and GitOps. It also includes providing engineering ownership and support for Vista’s security tooling stack, including SIEM, runtime security, vulnerability management, and threat intelligence. While detection engineering is a valuable adjacent capability, the primary focus is on Cloudflare and security platform engineering.

Required Skills

infrastructure-as-code
GitOps
CI/CD pipelines
automation
change control
cloud security engineering
platform security
security operations engineering
SIEM
runtime security
vulnerability management
threat intelligence
Detection engineering
Detection-as-Code
version control
automated testing
CI/CD practices
MITRE ATT&CK
threat-informed defence
detection lifecycle management
incident response
post-incident control improvement

Additional Information

Required Previous Experiences: Strong hands-on experience administering and engineering enterprise Cloudflare environments.
Proven experience managing platform or security configuration through infrastructure-as-code, GitOps, CI/CD pipelines, automation, and change control.
Strong background in cloud security engineering, platform security, security operations engineering, or a closely related discipline.
Practical experience with SIEM, runtime security, vulnerability management, threat intelligence, or other security tooling platforms.
Preferred Qualifications: Detection engineering experience, including Detection-as-Code, version control, automated testing, and CI/CD practices for detection content.
Familiarity with MITRE ATT&CK, threat-informed defence, detection lifecycle management, incident response, and post-incident control improvement.
Relevant cloud, security, Cloudflare, SIEM, or security operations certifications are advantageous but not mandatory.