Security Engineers - Senior Analyst / Manager

JobSpace; Wellington; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Discretionary bonus

Life & income protection

15 days paid sick leave

Flexible working

Paid recognition days

Job summary

PwC New Zealand’s Cyber and Digital Trust team is seeking Security Engineers to join embedded delivery across three specialist areas: integration security, web and forms security. You’ll work within major programmes, alongside Security Architects and delivery teams to apply security by design and address risks early.

You’ll produce evidence of controls, support testing and certification, and translate complex security requirements into practical guidance for technical and non-technical

Qualifications

• 4–7 years' experience in security engineering or related fields.
• Experience applying security within Salesforce, APIs, web applications, forms platforms or secure software delivery.
• Strong understanding of secure development practices and DevSecOps.

Responsibilities

• Provide hands-on security engineering across triage, risk assessment, control design, development support and assurance.
• Guide developers, platform teams and product owners to embed security by design throughout delivery.
• Reviewing solution designs, user stories, configurations, API specifications, forms, data flows and development changes to identify security and privacy risks.
• Translating security requirements into practical implementation guidance for technical and non-technical stakeholders.
• Producing clear documentation, control evidence, implementation guidance and assurance material.
• Supporting security testing, vulnerability remediation, control validation and certification and accreditation evidence where required.

Skills

Security engineering

Application security

DevSecOps

Risk assessment

Technical documentation

Stakeholder communication

Security certifications

Education

Bachelor's degree in a related field

Tools

Salesforce

MuleSoft

AEM

OAuth2

API security

Job description

Jora New Zealand will close on 9th September 2026. Thank you for being with us, we are cheering you on as you continue your career journey.

Security Engineers - Senior Analyst / Manager

Innovate. Build. Reinvent. Make your tech skills count at PwC New Zealand.

At PwC, our purpose is clear: to build trust in society and solve important problems.

This is a place to keep growing. You'll learn from the best, take on meaningful challenges, and make a lasting impact for our clients, our communities, and Aotearoa.

About the Role

PwC's Cyber and Digital Trust team supports major technology transformation programmes, helping clients build secure, trusted business and technology solutions.

We're looking for Security Engineers to add delivery capacity across three specialist areas:

• Integration security
• Web and forms security

These are hands-on security engineering roles. You'll be embedded within major programmes, working alongside Security Architects and wider delivery teams to support security triage, risk assessment, solution design, security by design, development support and assurance.

You'll apply security principles to business and technology solutions, help development teams identify and address security risks early, and provide clear evidence that agreed controls have been implemented effectively.

Your day-to-day could include:

• Providing hands-on security engineering support across triage, risk assessment, control design, development support and assurance.
• Guiding developers, platform teams and product owners to embed security by design throughout delivery.
• Reviewing solution designs, user stories, configurations, API specifications, forms, data flows and development changes to identify security and privacy risks.
• Translating security requirements into practical implementation guidance for technical and non-technical stakeholders.
• Producing clear documentation, control evidence, implementation guidance and assurance material.
• Supporting security testing, vulnerability remediation, control validation and certification and accreditation evidence where required.
• Escalating material design decisions and programme-level risks to Security Architects.

Specialist focus areas may include:

• Salesforce security: access control, sharing and permission models, Salesforce Shield, platform encryption, identity, authentication, integrations, Apex, Lightning Web Components, flows, Experience Cloud and secure Salesforce configuration and development.
• Integration security: MuleSoft or comparable integration platforms, API security, OAuth2, OpenID Connect, mTLS, gateway policies, service identities, data flows, secrets management, certificates, keys, tokens and secure integration patterns.
• Web and forms security: Salesforce Experience Cloud, Salesforce forms, Adobe Experience Manager, AEM Forms, customer-facing functionality, input validation, output encoding, file uploads, content processing, session management and secure handling of personal and sensitive information.

Skills You Will Bring or Develop in This Role

• Around 4–7 years' relevant experience in security engineering, application security, cyber security delivery, technology risk, or a related field.
• Practical experience applying security within one or more of these areas: Salesforce, enterprise integrations, APIs, web applications, forms platforms or secure software delivery.
• Strong understanding of secure development practices, DevSecOps, code review, automated security testing, risk assessment and remediation.
• The ability to work independently within your area of specialism, while escalating key design decisions and programme-level risks when needed.
• Clear communication skills, with the ability to work effectively with developers, architects, platform engineers, product owners and non-technical stakeholders.
• Experience producing high-quality technical documentation, assurance evidence, control guidance and reusable security patterns.
• Experience with New Zealand Government programmes, NZISM, Protective Security Requirements, security certification and accreditation, or relevant security clearances would be beneficial.
• Relevant certifications are desirable and could include Salesforce, MuleSoft, Adobe, OWASP, cloud, CISSP, CSSLP or equivalent security certifications.

Highlights of Working at PwC NZ

• Rewards - Discretionary bonus opportunities; generous referral bonuses; retail discounts & deals
• Growth - Global network; leadership development; A.I. tools and training; formal learning pathways
• Wellbeing - $250 annual wellbeing allowance; Life & income protection; Sonder/EAP/Headspace; 15 days' paid sick leave; group-rate health insurance eligibility applies
• Reputation - PwC is known for shaping tomorrow. Join us and you'll accelerate your career while helping clients and communities solve their most important problems.
• Flexibility - Flexible working; supportive coaching culture
• Time off - Two paid recognition days off provided each year during our annual summer shutdown period; purchase up to two extra weeks' annual leave
• Whānau & community - Paid parental leave for all parents with flexible options and financial planning support; inclusive networks; paid volunteering leave