Analyst Systems and Security - CERT
On this page
Tēnei tūranga – About the role
A CERT is an organisation that receives cyber incident reports, tracks cyber security incidents or attacks, and provides advice and alerts to its customers on how to respond and prevent further attacks. CERTs also work closely with their international counterparts to prevent and respond to cybersecurity incidents, and address cybercrime.
Establishing a national CERT means New Zealand joins an international network of CERTs, improving our access to information on potential or real-time cyber-attacks. It will help New Zealand play our part in a global effort to improve internet security. Ultimately, New Zealand will become a more trusted business and security partner.
CERT NZ is staffed with passionate cyber security experts and experienced staff, providing services Monday to Friday, except when activated by the national emergency response system when staff may be required to work weekends and/or outside normal hours.
The Analyst, Systems & Security maintains and supports CERTs operational environment, including the CERTs Operations Network and hardware and software used by CERT staff to ensure that the performance and security of computers, networks and applications meet user requirements and agreed standards.
Ngā herenga – Requirements of the role
Personal specifications
- Knowledge and experience of Linux administration.
- System development and automation within a Linux environment.
- A sound understanding of threats and the threat landscape.
- A solid understanding of security controls and how to mitigate threats.
- Working knowledge of virtualisation and cloud platforms.
- The ability to pick up new systems and processes quickly.
- An inquisitive mind, a willingness to learn and challenge own thinking.
- A self-starter with excellent organisational skills and a ‘can do’ attitude.
- Coding/development skills highly desirable.
- Ability to quickly establish and build strong working relationships with teammates, and with internal and external stakeholders.
- Must have the legal right to live and work in New Zealand.
- Must be capable of obtaining and maintaining government security clearance.
Qualifications
- A tertiary qualification, preferably in a technical discipline (e.g. System Engineering) and/or comparable relevant business experience.
Takohanga tuhinga o mua – Key accountabilities and deliverables
System administration
- Procure further systems required to enhance CERT NZ’s capability. These systems will be procured from both the international and domestic markets.
- Provide technical expertise on systems which are highly complex and in many cases are specialised for the Cyber Security industry.
Administrative and technical support of systems - helping to ensure systems meet stakeholder needs and are well supported, including:
- Day to day system and network administration.
- Work closely with incident managers to drive automation within the response process.
- Developing and running routine reports.
- Continuous analysis and improvement of systems and business processes.
- Ownership of the technical roadmap for CERT NZ.
- From time to time, represent CERT New Zealand as the expert on our security software, systems and processes at international cyber security conferences, sharing best practice amongst other CERTs and similar organisations.
- Measure and mitigate technical risks to NZ CERT.
- Day to day management of automated threat feeds.
- On-boarding new feeds.
- Participate directly in the Management of Cyber Security Incidents as needed.
Cyber security – knowledge and incident response
- Develops a level of expertise and fluency in the cyber security field, including staying up to date with new developments and relevant international activity.
- Finds opportunities to share cyber security domain knowledge with others within the team and wider CERT NZ.
Develops and builds skills and knowledge to participate in serious cyber incident response and coordination, including, where appropriate:
- Contributing to the unit’s response, thereby being instrumental in the coordination of New Zealand’s overall response to serious cyber incidents.
- Conducting and supporting briefings to senior executives.
- Communicating with technical and non-technical audiences.
- Able to participate in shift-based periods during activation for New Zealand’s response to serious cyber incidents.
Stakeholder management
- Relationships are established, maintained and enhanced with relevant clients and stakeholders.
- Works collaboratively to provide services that are sought after and recognised for being of high quality.
- Transfers knowledge and learning to the team and wider organisation.
- Timeliness of delivery is effectively managed to meet business and stakeholder needs.
- Issues and risks are identified and managed.
- Represents whole-of-Ministry views and protects its reputation in any external interactions.
Wellbeing, health and safety
- Displays commitment through actively supporting all safety and wellbeing initiatives
- Ensures own and others safety at all times
- Complies with relevant safety and wellbeing policies, procedures, safe systems of work and event reporting
- Reports all incidents/accidents, including near misses in a timely fashion
- Is involved in health and safety through participation and consultation
Tō tūranga i roto i te Manatū – Your place in the Ministry
The Analyst, Systems and Security position reports into the Team Lead, Systems and Security within the CERT NZ, Business Enablement team. CERT NZ sits within the Strategy and Enablement branch. The branch sits within the Te Whakatairanga Service Delivery group.
To mātou aronga – What we do for Aotearoa New Zealand
Hīkina Whakatutuki is the te reo Māori name for the Ministry of Business, Innovation and Employment. Hīkina means to uplift. Whakatutuki means to move forward, to make successful. Our name speaks to our purpose, Grow Aotearoa New Zealand for All.
To Grow Aotearoa New Zealand for All, we put people at the heart of our mahi. Based on the principles of Te Tiriti o Waitangi / The Treaty of Waitangi, we are committed to upholding authentic partnerships with Māori.
As agile public service leaders, we use our breadth and experience to navigate the ever-changing world. We are service providers, policy makers, investors and regulators. We engage with diverse communities, businesses and regions. Our work touches on the daily lives of New Zealanders. We grow opportunities (Puāwai), guard and protect (Kaihāpai) and innovate and navigate towards a better future (Auaha).
Ngā matatau – Our competencies
Cultivates innovation We create new and better ways for the organisation to be successful by challenging the status quo generating new and creative ideas and translating them into workable solutions.
Nimble learning We are curious and actively learn through experimentation when tackling new problems by learning as we go when facing new situations and challenges.
Customer focus We build strong customer relationships and deliver customer-centric solutions by listening and gaining insights into the needs of the communities we serve and actively seeking and responding to feedback.
Decision quality We make quality and timely decisions that shape the future for our communities and keep the organisation moving forward by relying on an appropriate mix of analysis, wisdom, experience, and judgement to make valid and reliable decisions.
Action oriented We step up, taking on new opportunities and tough challenges with purpose, urgency and discipline by taking responsibility, ownership and action on challenges, and being accountable for the results.
Collaborates We connect, working together to build partnerships with our communities, working collaboratively to meet shared objectives by gaining trust and support of others; actively seeking the views, experiences, and opinions of others and by working co-operatively with others across MBIE, the public sector and external stakeholder groups.
Te Tiriti o Waitangi
As an agency of the public service, MBIE has a responsibility to contribute to the Crown meeting its obligations under Te Tiriti o Waitangi (Te Tiriti). Meeting our commitment to Te Tiriti will contribute towards us realising the overall aims of Te Ara Amiorangi – Our Path, Our Direction, and achieve the outcome of Growing New Zealand for All. The principles of Te Tiriti - including partnership, good faith, and active protection – are at the core of our work. MBIE is committed to delivering on our obligations as a Treaty partner with authenticity and integrity and to enable Māori interests. We are committed to ensuring that MBIE is well placed to meet our obligations under the Public Service Act 2020 (Te Ao Tūmatanui) to support the Crown in strengthening the Māori/Crown Relationship under the Treaty and to build MBIE’s capability, capacity and cultural intelligence to deliver this.
Mahi i roto i te Ratonga Tūmatanui – Working in the public service
Ka mahitahi mātou o te ratonga tūmatanui kia hei painga mō ngā tāngata o Aotearoa i āianei, ā, hei ngā rā ki tua hoki. He kawenga tino whaitake tā mātou hei tautoko i te Karauna i runga i āna hononga ki a ngāi Māori i raro i te Tiriti o Waitangi. Ka tautoko mātou i te kāwanatanga manapori. Ka whakakotahingia mātou e te wairua whakarato ki ō mātou hapori, ā, e arahina ana mātou e ngā mātāpono me ngā tikanga matua o te ratonga tūmatanui i roto i ā mātou mahi.
In the public service we work collectively to make a meaningful difference for New Zealanders now and in the future. We have an important role in supporting the Crown in its relationships with Māori under the Treaty of Waitangi. We support democratic government. We are unified by a spirit of service to our communities and guided by the core principles and values of the public service in our work.
What does it mean to work in Aotearoa New Zealand’s Public Service?(external link) — Te Kawa Mataaho The Public Service Commission
