Senior Security Engineer - Analyst / Manager

About the Role

Join PwC New Zealand’s Cyber and Digital Trust team, which supports major technology transformation initiatives by helping clients develop secure and trusted business and technology solutions. We are seeking experienced Security Engineers to strengthen delivery capabilities across three key specialties: Salesforce security, integration security, and web and forms security. These hands-on roles involve close collaboration with Security Architects and delivery teams to manage security triage, risk evaluation, solution design, secure development support, and assurance processes.

Key Responsibilities

• Deliver practical security engineering support including triage, risk assessments, control design, development assistance, and assurance activities.
• Coach developers, platform teams, and product owners to embed security by design throughout project delivery.
• Analyze solution designs, user stories, configurations, API specs, forms, data flows, and development updates to identify security and privacy risks.
• Convert security requirements into actionable guidance for both technical and non-technical audiences.
• Generate clear documentation, control evidence, implementation guidelines, and assurance materials.
• Assist in security testing, vulnerability fixes, control validation, and provide certification or accreditation evidence when needed.
• Escalate significant design decisions and program-level risks to Security Architects.

Specialist Focus Areas

• Salesforce Security: Expertise in access control, sharing and permissions, Salesforce Shield, platform encryption, identity management, authentication, integrations, Apex, Lightning Web Components, flows, Experience Cloud, and secure Salesforce configuration and development.
• Integration Security: Knowledge of MuleSoft or similar integration platforms, API security, OAuth2, OpenID Connect, mutual TLS, gateway policies, service identities, data flows, secrets management, certificates, keys, tokens, and secure integration architectures.
• Web and Forms Security: Experience with Salesforce Experience Cloud, Salesforce forms, Adobe Experience Manager (AEM) and AEM Forms, customer-facing functionalities, input validation, output encoding, file uploads, content processing, session management, and managing personal and sensitive information securely.

Qualifications and Skills

• Approximately 4–7 years of relevant experience in security engineering, application security, cyber security operations, technology risk, or a similar area.
• Hands-on experience implementing security in at least one of these domains: Salesforce, enterprise integrations, APIs, web applications, forms platforms, or secure software delivery.
• Strong grasp of secure development methodologies, DevSecOps practices, code review, automated security testing, risk evaluation, and remediation.
• Capability to function independently within your specialization while escalating crucial design choices and program risks as necessary.
• Excellent communication skills, able to collaborate effectively with developers, architects, platform engineers, product owners, and both technical and non-technical stakeholders.
• Proficiency in producing comprehensive technical documentation, assurance evidence, control guidance, and reusable security patterns.
• Experience with New Zealand Government programs, including familiarity with NZISM, Protective Security Requirements, security certification and accreditation processes, or appropriate security clearances is advantageous.
• Preferred certifications may include Salesforce, MuleSoft, Adobe, OWASP, cloud security credentials, CISSP, CSSLP, or equivalent security qualifications.

What PwC Offers

• Competitive rewards including discretionary bonuses, generous referral bonuses, and retail discounts.
• Opportunities for growth through a global network, leadership development programs, AI tools training, and structured learning pathways.
• Employee wellbeing support such as a $250 annual allowance, life and income protection insurance, employee assistance programs including Sonder, Headspace, and 15 days paid sick leave; eligibility for group-rate health insurance.
• A prestigious reputation as an organization that shapes the future, providing a platform for career acceleration and meaningful impact.
• Flexible working arrangements supported by a coaching culture.
• Time off benefits including two paid recognition days during the annual summer shutdown and options to purchase up to two additional weeks of annual leave.
• Family and community support with paid parental leave for all parents, flexible arrangements, financial planning support, inclusive networks, and paid volunteering leave.