Staff Security Engineer

About Auror At Auror, we’re empowering the retail industry to tackle theft and Organised Retail Crime, a $150 billion problem globally. It’s a high‑volume, increasingly organised crime that puts people, retailers, and communities at risk every day. Founded in New Zealand 12 years ago, we work with some of the best and largest retailers across the US, Canada, Australia, New Zealand, and the UK. Our mission is to reduce violent retail crime by 50% in 5 years. The Role We’re hiring a Staff Security Engineer to join the Product & Engineering Security pillar. This engineer‑first role focuses on shipping code, deploying changes, and raising the security bar from within the platform. Location Auror’s headquarters are in Auckland, New Zealand. We follow a hybrid working model and are open to remote candidates based in New Zealand, with an expectation to travel to Auckland approximately every six weeks. Responsibilities Ship code in the platform, writing patches, refactoring weak patterns, and deploying changes in partnership with the product engineering teams. Build security tooling and automation, replacing manual evidence collection patterns with code and creating guardrails for secure defaults. Lead threat modelling and architecture reviews, and drive the in‑flight Wiz SAST/Code findings closure programme. Partner with SRE and Platform on cloud and infrastructure security – GCP, GitHub Actions hardening, CI/CD security, identity and secrets management, and supply‑chain controls. Help define and harden how Auror builds with and defends against AI, applying security thinking to LLM‑integrated features. Partner with Blue Team to design and tune detections, build playbooks, and contribute to post‑incident learning. Serve as a credible technical voice for enterprise customers during technical risk conversations. Set technical direction for security controls, tooling, and architecture, and coach engineers on secure design and judgement. Requirements Track record of writing production code and shipping changes that landed in real systems. Comfort working in unfamiliar codebases and partnering with owning teams. Hands‑on experience with cloud platforms (GCP preferred, Azure or AWS welcome), CI/CD pipelines, and infrastructure‑as‑code (Terraform or similar). Deep technical understanding of multiple classes of security defects and how to design them out. Strong application security background – threat modelling, architecture review, SAST and DAST, secure SDLC. Working knowledge of AI and LLM security concerns and a pragmatic view on building with AI safely. Comfort using AI engineering tooling (Claude Code, Gemini or similar) to ship work faster. Experience with SIEM tooling – writing queries, building detections, running log analysis. Strong communication skills – explain the “why” behind security decisions. Curiosity, low ego, and the ability to lead work independently in ambiguous territory. Calm decision‑making under pressure, especially during incidents. Alignment with our Guiding Principles. Benefits Competitive salary range (NZ$150 000–170 000). Annual bonus eligibility at NZ$5 500. Employee share scheme. Hybrid flexibility and short work weeks (Friday afternoons off). Health insurance covering 100% of individual plan. Mental and physical health policies, Wellness Days, up to NZ$750 for expert sessions annually. Comprehensive paid parental leave (12 weeks for birth parents, 6 weeks for non‑birth parents). Personal growth support – courses, conferences, events. Regular team lunches and social events. We celebrate diversity and inclusiveness at Auror and are committed to creating an environment where everyone can thrive, regardless of race, gender, sexual orientation, family status, religion, ethnicity, national origin, physical disability, veteran status, or age. #J-18808-Ljbffr