Security Engineer – Senior Analyst / Manager

About the role

PwC’s Cyber and Digital Trust team is seeking Security Engineers to strengthen major technology transformation programmes in Wellington. This hands‑on role works closely with Security Architects and delivery teams to embed security by design across Salesforce, integration platforms and web/forms solutions.

Key responsibilities

• Provide hands‑on security engineering support across triage, risk assessment, control design, development support and assurance.
• Guide developers, platform teams and product owners to embed security by design throughout delivery.
• Review solution designs, user stories, configurations, API specifications, forms and data flows to identify security and privacy risks.
• Translate security requirements into practical implementation guidance for technical and non‑technical stakeholders.
• Produce clear documentation, control evidence and assurance material.
• Support security testing, vulnerability remediation, control validation and certification evidence.
• Escalate material design decisions and programme‑level risks to Security Architects.

Required profile

• Hands‑on security engineering experience.
• Experience working within major technology transformation programmes.
• Ability to collaborate with Security Architects and multidisciplinary delivery teams.

Required skills

• Salesforce security: access control, sharing, permission models, Salesforce Shield, platform encryption, identity, authentication, Apex, Lightning Web Components, flows, Experience Cloud.
• Integration security: MuleSoft or comparable integration platforms, API security, OAuth2, OpenID Connect, mTLS, gateway policies, service identities, secrets management, certificates, keys, tokens.
• Web and forms security: Salesforce Experience Cloud, Adobe Experience Manager, AEM Forms, input validation, output encoding, file uploads, session management, secure handling of personal and sensitive information.