DeloitteEmployer profile
SAP Vulnerability Management - Solution Delivery Lead/Senior Solution Delivery Lead
Location not specified · 4–6 yrs
Experience- 4–6 yrs
Salary- Not disclosed
Location- Location not specified
- Work mode
- Not specified
- Job type
- Full-time
Apply by- Closing date not listed
- Posted
- 13 Dec 35
About this role
SummaryPosition Summary
Job title: SAP Vulnerability Management – Sr. Consultant (SDL/SSDL)
Our Risk and Financial Advisory services professionals help organizations effectively navigate business risks and opportunities—from strategic, reputation, and financial risks to operational, cyber, and regulatory risks—to gain competitive advantage. We apply our experience in ongoing business operations and corporate lifecycle events to help clients become stronger and more resilient. Our market-leading teams help clients embrace complexity to accelerate performance, disrupt through innovation, and lead in their industries. We use cutting-edge technology like AI/ML techniques, analytics, and Robotic Process Automation (RPA) to solve Deloitte’s clients‘ most complex issues. Working in Risk and Financial Advisory at Deloitte US-India offices has the power to redefine your ambitions.
The Team
Cyber & Strategic Risk
The cyber risk services— As part of Cyber Application Security team, you will be part of our SAP practice and will be responsible for assisting the Clients in running SAP Vulnerability Assessments.
Qualication
The key job responsibilities will be to:
- Ability to run vulnerability scans using vulnerability scanning tools
- Perform penetration tests to identify the vulnerabilities in the security controls setup
- Ability to identify and evaluate the scan results, and provide insightful remediations
- Ability to run SAP ABAP custom code scanning and prepare a report with insightful remediations
- Continuous monitoring of SAP vulnerabilities in a Managed Service projects to identify new vulnerabilities and put forth an action plan to tackle these vulnerabilities
- Minimum of 4-6 years’ experience in the areas of SAP vulnerability scanning, security event management and penetration testing
- Deep technical knowledge in Threat Modelling and IT Risk Assessment projects
- Deep technical knowledge of security vulnerabilities & exploitation techniques
- Experience working with SAP application vulnerability scanners such as Onapsis, SecurityBridge etc
- Knowledge and experience of running network and Interface vulnerability scanners
- Hands-on experience in validating vulnerability scan reports and prepare reports with recommendations for remediation
- Deep understanding on Static Code Analysis and Dynamic Application Security Testing
- Experience in running SAP ABAP custom code analysis using tools such as Onapsis Control for Code, SecurityBridge, SAP Code Vulnerability Analyzer etc.,
- Experience in validating code analysis reports and prepare reports with recommendations for remediation
- Experience in analyzing security alerts and events, and reporting the findings
- Deep understanding of SAP patch Management
- Deep Understanding of OWASP Top 10 Security Vulnerabilities such as SQL Injections, Broken Access Controls, Security Misconfiguration etc.
- Understanding of leading vulnerability scoring standards, such as CVSS, and ability to translate vulnerability severity as security risk
- Knowledge on Cyber Security Frameworks such as NIST, ISO 27001 etc.,
- Possession of excellent oral and written communication skill
- Experience in SAP ABAP is highly preferred
- Experience in SAP Security
- Experience with application monitoring, Managed Services business, Threat and Vulnerability Management for Application infrastructure, SAP ABAP code scanning
- Solid and demonstrable comprehension of Information Security including OWASP/SANS, Security Test Case development (or mis-use case), emerging threats, attacks, and vulnerability management
- Understanding of security essentials including, networking concepts, defense strategies, and current security technologies
- Ability to research and characterize security threats to include identification and classification of application related threat indicators
- Certification such as SANS Secure Coding, Security Engineering, Web Application Security, ISC2 CSSLP, CEH (Certified Ethical Hacker), CISSP etc. are preferred
- B.E. / B.Tech / M.Tech / MS
#CA-RR
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our diverse, equitable, and inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work. Learn more about our inclusive culture.
Our purpose
Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact.
Professional development
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
Requisition code: 181754