Senior Security Engineer: Secure by Design & DevSecOps

JobSpace; Wellington; On-site; NZD 120,000 - 180,000; Full time

Benefits offered by this job

Discretionary bonus

Life & income protection

15 days paid sick leave

Flexible working

Paid recognition days

Job summary

PwC New Zealand’s Cyber and Digital Trust team is seeking Security Engineers to join embedded delivery across three specialist areas: integration security, web and forms security. You’ll work within major programmes, alongside Security Architects and delivery teams to apply security by design and address risks early.

You’ll produce evidence of controls, support testing and certification, and translate complex security requirements into practical guidance for technical and non-technical

Qualifications

• 4–7 years' experience in security engineering or related fields.
• Experience applying security within Salesforce, APIs, web applications, forms platforms or secure software delivery.
• Strong understanding of secure development practices and DevSecOps.

Responsibilities

• Provide hands-on security engineering across triage, risk assessment, control design, development support and assurance.
• Guide developers, platform teams and product owners to embed security by design throughout delivery.
• Reviewing solution designs, user stories, configurations, API specifications, forms, data flows and development changes to identify security and privacy risks.
• Translating security requirements into practical implementation guidance for technical and non-technical stakeholders.
• Producing clear documentation, control evidence, implementation guidance and assurance material.
• Supporting security testing, vulnerability remediation, control validation and certification and accreditation evidence where required.

Skills

Security engineering

Application security

DevSecOps

Risk assessment

Technical documentation

Stakeholder communication

Security certifications

Education

Bachelor's degree in a related field

Tools

Salesforce

MuleSoft

AEM

OAuth2

API security

Job description

PwC New Zealand’s Cyber and Digital Trust team is seeking Security Engineers to join embedded delivery across three specialist areas: integration security, web and forms security. You’ll work within major programmes, alongside Security Architects and delivery teams to apply security by design and address risks early.

You’ll produce evidence of controls, support testing and certification, and translate complex security requirements into practical guidance for technical and non-technical