2 days ago
Wellington, New ZealandStaff+
Responsibilities
- Provide hands-on security engineering across security triage, risk assessment, control design, development support, testing, remediation, validation, and assurance.
- Guide developers, platform teams, product owners, and other stakeholders in applying security by design.
- Review solution designs, user stories, configurations, APIs, forms, data flows, and development changes for security and privacy risks.
- Translate security requirements into practical implementation guidance and produce technical documentation, control evidence, assurance material, and reusable security patterns.
- Support security certification and accreditation evidence and escalate significant design decisions and programme-level risks to Security Architects.
Requirements
- Around 4–7 years of relevant experience in security engineering, application security, cybersecurity delivery, technology risk, or a related field.
- Practical experience with security for Salesforce, enterprise integrations, APIs, web applications, forms platforms, or secure software delivery.
- Strong understanding of secure development practices, DevSecOps, code review, automated security testing, risk assessment, and remediation.
- Ability to work independently while escalating key design decisions and programme-level risks when necessary.
- Clear communication skills and the ability to collaborate with developers, architects, platform engineers, product owners, and non-technical stakeholders.
- Experience producing high-quality technical documentation, assurance evidence, control guidance, and reusable security patterns.
- Experience with New Zealand Government programmes, NZISM, Protective Security Requirements, security certification and accreditation, or relevant security clearances is beneficial.
- Relevant Salesforce, MuleSoft, Adobe, OWASP, cloud, CISSP, CSSLP, or equivalent security certifications are desirable.
Benefits
- Discretionary bonus opportunities, referral bonuses, and retail discounts and deals.
- Global network, leadership development, AI tools and training, and formal learning pathways.
- $250 annual wellbeing allowance, life and income protection, Sonder/EAP/Headspace, paid sick leave, and eligible group-rate health insurance.
- Flexible working and a supportive coaching culture.
- Two paid recognition days during the annual summer shutdown, with the option to purchase up to two additional weeks of annual leave.
- Paid parental leave, inclusive networks, financial planning support, and paid volunteering leave.
- Travel requirements are up to 20%.
Categories
About PwC
PwC is a global network of professional services firms providing assurance, tax, and advisory work for businesses and public-sector clients. It sells project-based and managed consulting, audit, and deals services, and implements and integrates business applications. Formed in 1998 by the merger of Price Waterhouse and Coopers & Lybrand, it is headquartered in London and is one of the Big Four accounting firms.