Log In
Sign Up
Admin
Application Security Full Time
About the job
About Deloitte
Position Summary
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of which is a legally
separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.
Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients
under the rules and regulations of public accounting.
Copyright © 2017 Deloitte Development LLC. All rights reserved.
Member of Deloitte Touche Tohmatsu Limited
Job Description: Cyber Risk Application Security Consultant/Sr.Consultant
Are you interested in improving the cyber and organizational risk profiles of leading companies? Do you want to be involved in delivering Fusion Managed / Attack Surface Management (ASM) Services including identifying potentially vulnerable IT assets or weak security configurations within their networks in real time? Are you excited about rapidly changing operational environments, learning what you need to get the job done, and producing accurate and timely results?
If yes, then Deloittes Fusion Managed Services (FMS) team could be the place for you! Transparency, innovation, collaboration, sustainability: these are the hallmark issues shaping cyber initiatives today. Deloittes FMS business is passionate about making an impact with lasting change. Delivering our industry leading services requires fresh thinking and a creative approach. We collaborate with teams from across our organization in order to bring the full breadth of Deloitte, its commercial and public sector expertise, to best support our clients. Our aspiration is to be the premier integrated services provider in helping to transform the cyber security services marketplace.
Our team is client focused and mission driven. As a Cyber Risk Fusion Attack Surface Senior Analyst in Deloitte’s Fusion Managed Services, youll work with our diverse teams of passionate professionals to help solve for some of todays toughest cybersecurity challenges to enable or clients to achieve business growth and manage risk.
Work youll do
As a Fusion Attack Surface Consultant, you will assist our clients with discovering vulnerabilities and rogue assets (such as shadow IT) in their networks as part of a team of engineers and analysts around the world who specialize in the tactics, tools and procedures used by cyber criminals.
Configure and execute vulnerability scans enumerating vulnerabilities within the internal and external network
Analyze, enrich and prioritize specific activities designed to remediate discovered vulnerabilities such as patch deployment or configuration hardening
Assist in producing a comprehensive operating picture and cyber security situational awareness
Work with various vulnerability threat feeds (such as vendor bulletins), assessment tools, asset inventory tools as well as reporting tools and frameworks to match assets to identified vulnerabilities and produce reports
Respond to requests for ad-hoc reporting and research topics from management and analysts as required
Identify gaps in available asset information and engage with leadership on strategies to meet service-level requirements through affirmative handoff with remediation partners
Quickly understand and deliver on company and customer requirements
Aid in and participate in daily, weekly, quarterly, and yearly production reporting for clients, partners, and internal teams
Adhere to internal operational security and other Deloitte policies
Qualifications
Required:
Bachelor’s degree or higher in Attack Surface Management, Information Security, Information Technology, Computer Science, Math, or any other related area
3-9 years of experience working in information technology vulnerability management, information security, incident response, red team operations, application security, reverse engineering, or other technical cyber security roles
Certified Information Systems Security Professional (CISSP), Certification in Certified Intrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent
About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of which is a legally
separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.
Please see www.deloitte.com/us/about for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients
under the rules and regulations of public accounting.
Copyright © 2017 Deloitte Development LLC. All rights reserved.
Member of Deloitte Touche Tohmatsu Limited
Understanding of possible attack activities such as network probing/ scanning, DDOS, malicious code activity, etc.
Understanding of common network infrastructure devices such as routers and switches
Understanding of basic networking protocols such as TCP/IP, DNS, HTTP
Understanding of vulnerability classification using National Vulnerability Database nomenclature such as CVE/CVSS
Basic knowledge in system security architecture and security solutions
Preferred:
Proven ability to translate complex information sets into specific recommendations that can be actioned by customers to enhance their security posture
Familiarity with cyber threats, defenses, motivations and techniques
Experience with vulnerability analysis tools such as Qualys or Tenable, and the asset provisioning/deprovisioning lifecycle
Patch management skills and technology application such as Microsoft System Center Configuration Manager (SCCM)
Experience distilling raw information into actionable intelligence
Outstanding English written and oral communication skills and the ability to prioritize work
Strong understanding of threat analysis and enterprise level, mitigation strategies
Working knowledge of how malicious code operates and how technical vulnerabilities are exploited
Strong knowledge of operating systems and networking technologies in general
Strong knowledge of databases, query design, and how to analyze data thus obtained
Knowledge of supporting toolsets such as Confluence, Jira, and Configuration Management Databases (CMDB) such as ServiceNow
Strong analytical and problem-solving skills
Self-motivated to improve knowledge and skills
A strong desire to understand the what as well as the why and the how of security incidents
The team Deloitte Advisory’s Cyber Risk team helps complex organizations more confidently pursue their growth, innovation and performance agendas through proactive management of the associated cyber risks. Our professionals provide advisory and implementation services that integrate risk, regulatory, and technology skills to help clients transform their legacy programs into proactive Secure.Vigilant.Resilient.TM cyber risk programs. Join the team developing the future state of cyber risk solutions. Learn more about Deloitte Advisorys Cyber Risk Services practice.
Recruiting tips
Finding the right job and preparing for the recruitment process can be tricky. Check out tips from our Deloitte recruiting professionals to set yourself up for success. Check out recruiting tips from Deloitte recruiters .
Benefits
We believe that to be an undisputed leader in professional services, we should equip you with the resources that can make a positive impact on your well-being journey. Our vision is to create a leadership culture focused on the development and well-being of our people. Here are some of our benefits and programs to support you and your familys well-being needs. Learn more about what working at Deloitte can mean for you .
Our people and culture
Our people and our culture make Deloitte a place where leaders thrive. Get an inside look at the rich diversity of background, education, and experiences of our people. What impact will you make? Be inspired by the stories of our people .
Professional development
You want to make an impact. And we want you to make it. We can help you do that by providing you the culture, training, resources, and opportunities to help you grow and succeed as a professional. Learn more about our commitment to developing our people .
