Security Engineer Senior Analyst / Manager

Kia ora,

Innovate. Build. Reinvent. Make your tech skills count at PwC New Zealand.

At PwC, our purpose is clear: to build trust in society and solve important problems.

This is a place to keep growing.You’lllearn from the best, take on meaningful challenges, and make a lasting impact for our clients, our communities, and Aotearoa.

Ngākōreromotēneitūranga/ About therole

PwC’s Cyber and Digital Trust team supports major technology transformation programmes, helping clients build secure, trusted business and technology solutions.

We’re looking for SecurityEngineers to add delivery capacity across three specialist areas:

• Salesforce security

• Integration security

• Web and forms security

These are hands-on security engineering roles.You’llbeembedded within major programmes, working alongside Security Architects and wider delivery teams to support security triage, risk assessment, solution design,security by design, developmentsupportand assurance.

You’llapply security principles to business and technology solutions, helpdevelopment teamsidentifyand address security risks early, and provideclear evidencethat agreed controls have been implemented effectively.

Your day-to-day could include:

• Providing hands-on security engineering support across triage, risk assessment, control design,development support and assurance.

• Guiding developers, platform teams and product owners to embed security by design throughout delivery.

• Reviewing solution designs, user stories, configurations, API specifications, forms, data flows and development changes to identify security and privacy risks.

• Translating security requirements into practical implementation guidance for technical and non-technical stakeholders.

• Producing clear documentation, control evidence, implementation guidance and assurance material.

• Supportingsecurity testing, vulnerability remediation, control validation and certification and accreditation evidence where required.

• Escalating material design decisions and programme-level risks to Security Architects.

Specialist focus areas may include:

• Salesforce security: access control, sharing and permission models, Salesforce Shield, platform encryption, identity, authentication, integrations, Apex, Lightning Web Components, flows, Experience Cloud and secure Salesforce configuration and development.

• Integration security: MuleSoft or comparable integration platforms, API security, OAuth2, OpenID Connect,mTLS, gateway policies, service identities, data flows, secrets management, certificates, keys, tokens and secure integration patterns.

• Web and forms security: Salesforce Experience Cloud, Salesforce forms, Adobe Experience Manager, AEM Forms, customer-facing functionality, input validation, output encoding, file uploads, content processing, session management and secure handling of personal and sensitive information.

Ngāpūkengakakaweamaiekoe, kawhakawhanakehiarāneiitēneitūranga/ Skills you willbring ordevelopinthisrole

• Around 4–7 years’ relevant experience in security engineering, application security, cyber security delivery, technology risk, or a related field.

• Practical experience applying security within one or more of these areas: Salesforce, enterprise integrations, APIs, web applications, forms platforms or secure software delivery.

• Strong understanding of secure development practices,DevSecOps, code review, automated security testing,riskassessment andremediation.

• The ability to work independently within your area of specialism, while escalating key design decisions and programme-level risks when needed.

• Clear communication skills, with the ability to work effectively with developers, architects, platform engineers, product owners and non-technical stakeholders.

• Experience producing high-quality technical documentation, assurance evidence, control guidance and reusable security patterns.

• Experience with New Zealand Government programmes, NZISM, Protective Security Requirements, security certification and accreditation, or relevant security clearances would be beneficial.

• Relevant certifications are desirable andcouldinclude Salesforce, MuleSoft, Adobe, OWASP, cloud, CISSP, CSSLP or equivalent security certifications.

Ngāāhuatangahirahiraotemahi ki PwC / Highlights of working at PwC NZ

• Rewards - Discretionary bonus opportunities; generous referral bonuses; retail discounts & deals

• Growth - Global network; leadership development; A.I. tools and training; formal learning pathways

• Wellbeing - $250 annual wellbeing allowance; Life & income protection; Sonder/EAP/Headspace; 15days’paid sick leave; group-rate health insurance eligibility applies

• Reputation -PwC is known for shaping tomorrow. Join us and you’ll accelerate your career while helping clients and communities solve their most important problems.

• Flexibility - Flexible working; supportive coaching culture

• Time off - Twopaidrecognition days off provided each year during our annual summer shutdown period; purchase up to two extra weeks’ annual leave

• Whānau & community - Paid parental leave for all parents with flexible options and financial planning support; inclusive networks; paid volunteering leave

Mōteahatāuetatariana?/ What are you waiting for?

Hit Apply now. To learn how you can grow and shine in your career at PwC, visit our careers site athttps://www.pwc.co.nz/careers.html.

Grow here. Go further.