Security Engineers - Senior Analyst / Manager

Management Level Manager Job Description & Summary Kia ora,   Innovate. Build. Reinvent. Make your tech skills count at PwC New Zealand.   At PwC, our purpose is clear: to build trust in society and solve important problems.   This is a place to keep growing.   You’ll   learn from the best, take on meaningful challenges, and make a lasting impact for our clients, our communities, and Aotearoa.   Ngā   kōrero   mo   tēnei   t ūranga   / Abo ut the   role   PwC’s Cyber and Digital Trust team supports major technology transformation programmes, helping clients build secure, trusted business and technology solutions.   We’re looking for Security   Eng ineers to add delivery capacity across three specialist areas:   Salesforce security   Integration security   Web and forms security   These are hands-on security enginee ring roles.   You ’ ll   be   embedded within major programmes, working alongside Security Architects and wider delivery teams to support security triage, risk assessment, solution design,   security by design,  development   support   and assurance.   You’ll   apply security principles to business and technology solutions, help   deve lop m en t  team s   identif y   and address security risks early, an d provide   clea r evidenc e   that agreed controls have been implemented effectively.   Your day-to-day could include:   Providing hands-on security engineering support across triage, risk assessment, control design,   devel opment support and assurance.   Guiding developers, platform teams and product owners to emb ed sec urity by design throughout delivery.   Re viewing solution designs, user stories, configurations, API specifications, forms, data flows and de velopmen t changes to identify security and privacy risks.   Translating security requirements into practical implementation guidance for technical and non-technical stakeholders.   Pro du cing clear documentation, control evidence, implementation guidance and assurance material.   Supporting   se curity testing, vulnerability remediation, control validation and certification and accreditation evidence where required.   Escalating material design decisions and programme-level risks to Security Architects.     Specialist focus areas may include:   Salesforce security: access control, sharing and permission models, Salesforce Shield, platform encryption, identity, authentication, integrations, Apex, Lightning Web Components, flows, Experience Cloud and secure Salesforce configuration and development.   Integ ration secu rity:  MuleSoft or comparable integration platforms, API security, OAuth2, OpenID Connect,   mTLS , gateway policies, service identities, data flows, secrets management, certificates, keys, tokens and secure integration patterns.   Web and forms security: Salesforce Experience Cloud, Salesforce forms, Adobe Exp erienc e Manager, AEM Forms, customer-facing functionality, input validation, output encoding, file uploads, content processing, session management and secure handling of personal and sensitive information.   Ngā   pū kenga   ka   kawea   mai   e   ko e , ka   whakawhanakehia   rān ei   i   tēne i   tūranga   / Skills you w ill   brin g or   develop   in   this   role   Around 4–7 years’ relevant experience in security engineering, application security, cyber security delivery, technology risk, or a related field.   Practical experience applying security within one or more of these areas: Salesforce, enterprise integrations, APIs, web applications, forms platforms or secure software delivery.   Strong understanding of secure development practices,   DevSecOps , code review, automated security testing,   risk   assessment and   remediat ion.   The ability to work independently within your area of specialism, while escalating key design decisions and programme-level risks when needed.   Clear communication skills, with the ability