Security Engineers - Senior Analyst / Manager

Kia ora, 

Innovate. Build. Reinvent. Make your tech skills count at PwC New Zealand. 

At PwC, our purpose is clear: to build trust in society and solve important problems. 

This is a place to keep growing. You’ll learn from the best, take on meaningful challenges, and make a lasting impact for our clients, our communities, and Aotearoa. 

Ngā kōrero mo tēnei tūranga / About the role 

PwC’s Cyber and Digital Trust team supports major technology transformation programmes, helping clients build secure, trusted business and technology solutions. 

We’re looking for Security Engineers to add delivery capacity across three specialist areas: 

• Salesforce security 

• Integration security 

• Web and forms security 

These are hands-on security engineering roles. You’ll be embedded within major programmes, working alongside Security Architects and wider delivery teams to support security triage, risk assessment, solution design, security by design, development support and assurance. 

You’ll apply security principles to business and technology solutions, help development teams identify and address security risks early, and provide clear evidence that agreed controls have been implemented effectively. 

Your day-to-day could include: 

• Providing hands-on security engineering support across triage, risk assessment, control design, development support and assurance. 

• Guiding developers, platform teams and product owners to embed security by design throughout delivery. 

• Reviewing solution designs, user stories, configurations, API specifications, forms, data flows and development changes to identify security and privacy risks. 

• Translating security requirements into practical implementation guidance for technical and non-technical stakeholders. 

• Producing clear documentation, control evidence, implementation guidance and assurance material. 

• Supporting security testing, vulnerability remediation, control validation and certification and accreditation evidence where required. 

• Escalating material design decisions and programme-level risks to Security Architects. 

Specialist focus areas may include: 

• Salesforce security: access control, sharing and permission models, Salesforce Shield, platform encryption, identity, authentication, integrations, Apex, Lightning Web Components, flows, Experience Cloud and secure Salesforce configuration and development. 

• Integration security: MuleSoft or comparable integration platforms, API security, OAuth2, OpenID Connect, mTLS, gateway policies, service identities, data flows, secrets management, certificates, keys, tokens and secure integration patterns. 

• Web and forms security: Salesforce Experience Cloud, Salesforce forms, Adobe Experience Manager, AEM Forms, customer-facing functionality, input validation, output encoding, file uploads, content processing, session management and secure handling of personal and sensitive information. 

Ngā pūkenga ka kawea mai e koe, ka whakawhanakehia rānei i tēnei tūranga / Skills you will bring or develop in this role 

• Around 4–7 years’ relevant experience in security engineering, application security, cyber security delivery, technology risk, or a related field. 

• Practical experience applying security within one or more of these areas: Salesforce, enterprise integrations, APIs, web applications, forms platforms or secure software delivery. 

• Strong understanding of secure development practices, DevSecOps, code review, automated security testing, risk assessment and remediation. 

• The ability to work independently within your area of specialism, while escalating key design decisions and programme-level risks when needed. 

• Clear communication skills, with the ability to work effectively with developers, architects, platform engineers, product owners and non-technical stakeholders. 

• Experience producing high-quality technical documentation, assurance evidence, control guidance and reusable security patterns. 

• Experience with New Zealand Government programmes, NZISM, Protective Security Requirements, security certification and accreditation, or relevant security clearances would be beneficial. 

• Relevant certifications are desirable and could include Salesforce, MuleSoft, Adobe, OWASP, cloud, CISSP, CSSLP or equivalent security certifications. 

Ngā āhuatanga hirahira o te mahi ki PwC / Highlights of working at PwC NZ 

• Rewards - Discretionary bonus opportunities; generous referral bonuses; retail discounts & deals 

• Growth - Global network; leadership development; A.I. tools and training; formal learning pathways 

• Wellbeing - $250 annual wellbeing allowance; Life & income protection; Sonder/EAP/Headspace; 15 days’ paid sick leave; group-rate health insurance eligibility applies 

• Reputation - PwC is known for shaping tomorrow. Join us and you’ll accelerate your career while helping clients and communities solve their most important problems. 

• Flexibility - Flexible working; supportive coaching culture 

• Time off - Two paid recognition days off provided each year during our annual summer shutdown period; purchase up to two extra weeks’ annual leave 

• Whānau & community - Paid parental leave for all parents with flexible options and financial planning support; inclusive networks; paid volunteering leave 

Mō te aha tāu e tatari ana? / What are you waiting for? 

Hit Apply now. To learn how you can grow and shine in your career at PwC, visit our careers site at https://www.pwc.co.nz/careers.html. 

Grow here. Go further.