DeloitteEmployer profile
USI - FY25|R&FA|Cyber - DevSecOps| Senior Consultant
Location not specified · 7–9 yrs
Experience- 7–9 yrs
Salary- Not disclosed
Location- Location not specified
- Work mode
- Not specified
- Job type
- Full-time
Apply by- Closing date not listed
- Posted
- 12 Nov 35
About this role
SummaryPosition Summary
ApplicationSecurity—Senior Solution Delivery Lead
Deloitte’s CyberRiskServices helpourclientstobesecure,vigilant,andresilientinthefaceofanever-increasing array of cyber threats and vulnerabilities. Our Cyber Risk practice helps organizations with the management of information and technology risks by delivering end-to-end solutions using proven methodologies and tools in a consistent manner.Ourserviceshelporganizationsto address,in atimelymanner,pervasiveissues,suchasidentity theft, data security breaches, data leakage, cyber security, and system outages across organizations of various sizes and industries with the goal of enabling ongoing, secure, and reliable operations across the enterprise.
Workyouwill do
As a Senior Solution Delivery Lead in the hybrid operate business, you are responsible for adhering to the defined operating proceduresandguidelinesinoperatingthe applicationsecurityservicesintheManagedServicesmodel, which includes the following:
- Provides oversight on projects, guides the team on a day-to-day basis and ensures that assigned tasks and responsibilities are fulfilled in a timely fashion
- Demonstrates understanding of business and information technology service management processes
- Interacts with clients, managers and partners to build and nurture strong relationships
- UnderstandandbecompliantwiththeServiceLevelAgreementsdefinedfortheDevSecOps services;
- Understand and deep knowledge of application security engineering principles, and helping client’s development team and function to follow secure development practices which includes primarily monitoringandperformingthe securitydesignreview,architecturereview,threatmodeling, security testing, secure code review, secure build processes;
- Well versed with the application deployment and configuration baselines, and understanding of how theapplicationenvironmentoperatesinasecureenvironmentandhowexceptionsarehandledduring operations;
- Facilitateuseoftechnology-basedtoolsormethodologiestocontinuouslyimprovethemonitoring, management and reliability of the service;
- Performmanualandautomatedsecurityassessmentofthe applications;
- Involvedintriaginganddefecttrackingprocesswiththedevelopmentteamandhelpingtheteamto fix issues at the code level based on the priority of the tickets;
- BealiaisonbetweentheApplicationdevelopmentandinfrastructureteam,andintegratethe processes between infrastructure monitoring and operations processes with the secure development/testing and management processes;
- Identifying,researchingandanalyzingapplicationsecurityeventswhichmayincludeemergingand existing persistent threats to the client's environment; and
- Performingactivemonitoringandtrackingofapplicationrelatedthreatactorsandtactics,techniques and procedures (TTPs), that could likely cause an impact to client organization
Deloitte’s DevSecOps is a standardized process, to help clients with large development functions, and application dependenciesfortheirday-to-dayoperations.Theprocessenablestheclienttoaddresskeyvulnerabilitiesandrisks associated with their various application environment at different stages of their development lifecycle.
At the core of our Application Security Managed Services Team professionals’ monitors, collects and analyses security related issues on application environment (both at code level and infrastructure level), that may potentially become a threattoanorganization.Thisdetectionofapplicationthreats/vulnerabilitiesiscarriedoutusingauniqueblendofour applicationsecuritytestingandmonitoringtoolsandintelligencedatacollectedthroughourvastexperiencewithinthe Advice and Implement business.
Required:
- Approx 7-9 years’ experience in application security testing, deployment, and security management phases
- Deepinterestinapplicationspecificvulnerabilities,codedevelopmentandinfrastructure knowledge;
- Investigativeandanalyticalproblem-solving skills;
- Experienceincollecting,analyzing,andinterpretingqualitativeandquantitativedatafromdefinedapplication security services related sources (tools, monitoring techniques etc.)
- KnowledgeandexperienceofOWASPTop10,SANSSecureProgramming,SecurityEngineering Principles;
- Hands-onexperienceinperformingcodereviewofdotNet,JavaandSwiftand objectiveC code;
- Hands-onexperienceinrunning,installingandmanagingSAST,DASTandIASTsolutions,suchasCheckmarx, Fortify and Contrast in large enterprise
- Understandingofleadingvulnerabilityscoringstandards,suchasCVSS,andabilitytotranslatevulnerability severity as security risk;
- Hands-onexperienceonatleastoneCI/CDtoolsetandbuildingpipelines usingTeamcity,Bamboo,Jenkins, Chef, Puppet, selenium, AWS and AZURE DevOps;
- HandsonexperienceoncontainertechnologysuchasKubernetes,Dockers,AKS, EKS.
- Knowledgeofcloudenvironmentsanddeploymentsolutionssuchasserverless computing;
- Handsonexperiencein penetrationtestingofmobile,desktopandweb applications;
- Musthaveexperienceinwritingcustomexploitationscriptsand utilities;
- Possessionofexcellentoralandwrittencommunication skill;
- Knowledgeofoneormorescriptinglanguagesforautomationandcomplex searches;
- MusthavecloudsecurityspecializationinSecurity; and
- CertificationsuchasSANSGIAC,ISC2CSSLP,OSCPetc.are preferred.
- Bachelor’sincomputerscience orothertechnical fields; and ExperienceonWebapplicationfirewallssuchasKonaare preferred
- Experience with application monitoring, Managed Services business primarily on, ThreatandVulnerability Management for Application infrastructure, source code verification, link analysis, and threat modeling;
- SolidanddemonstrablecomprehensionofInformationSecurityincludingOWASP/SANS,SecurityTestCase development(ormis-usecase),OOADnotations,emerging threats,attacks,andvulnerabilitymanagement
- Understandingofsecurityessentialsincluding;networkingconcepts,defensestrategies,andcurrentsecurity technologies
- Abilitytoresearchandcharacterizesecuritythreatstoincludeidentificationandclassificationofapplicationrelated threat indicators
- Rotational night shifts are a pre-requisite
- The role may require Permanent night shifts basis Client/Project demands
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
Our people and culture
Our diverse, equitable, and inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our client most complex challenges. This makes Deloitte one of the most rewarding places to work. Learn more about our inclusive culture.
Our purpose
Deloitte’s purpose is to make an impact that matters for our clients, our people, and in our communities. We are creating trust and confidence in a more equitable society. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. We are focusing our collective efforts to advance sustainability, equity, and trust that come to life through our core commitments. Learn more about Deloitte's purpose, commitments, and impact.
Professional development
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
Requisition code: 182352