Cyber Cloud DevSecOps Analyst / Security Engineer I

Deloitte • San Diego, CA

4d • $68,000 - $133,900

About The Position

Deloitte & Touche LLP is hiring an Analyst, Cloud DevSecOps for its Cyber Enterprise Security team. The role supports delivery of DevSecOps and Secure SDLC programs through research, analysis of client environments, documentation, and coordination across governance, identity, application security, platform and infrastructure security, monitoring, resilience, and data protection.

The analyst assists with Secure by Design and security engagement intake workflows; helps develop controls frameworks and mappings; contributes to current-state assessments, workshops, roadmaps, operating model options, and client recommendations; and supports security integration into CI/CD and SDLC workflows. The role also includes preparing reports, metrics, dashboards, and presentations, maintaining project documentation and action logs, supporting client communications, and contributing to business development, eminence, and internal enablement.

The Enterprise Security offering embeds security in digital transformation, including security architecture, secure development and deployment, cyber cloud capabilities, application security, and security for emerging technologies and connected products. Travel averages 50%, depending on the work, clients, and industries served. The position is available in Costa Mesa, Denver, Los Angeles, San Diego, San Francisco, Seattle, and Tempe. The estimated wage range is $68,000 to $133,900; the role may also be eligible for a discretionary annual incentive program. Deloitte describes opportunities for learning, skill development, mentorship, and professional growth.

Requirements

• Bachelor of Arts or Bachelor of Science degree.
• At least 1 year of experience in technical consulting, problem solving, and solution delivery.
• Ability to travel an average of 50%, based on the work and the clients and industries or sectors served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Nice To Haves

• Previous consulting or Big 4 experience.
• At least 1 year of experience designing or leading DevSecOps or Secure SDLC programs, including assessment, roadmap development, operating model work, and implementation oversight.
• Experience translating policy and standards into engineering-ready controls and workflows.
• Experience with security control frameworks, including the NIST Cybersecurity Framework and/or NIST Special Publication 800-53.
• Experience with automation and workflow platforms, including ServiceNow or similar tools.
• Experience with application security and modern engineering ecosystems, including CI/CD concepts, containers, and SDLC tooling.
• Experience with code signing, public key infrastructure concepts, and security tooling ecosystems.
• Experience with dashboarding and analytics tools, including Microsoft Power BI.
• Understanding of regulatory and compliance requirements, including ISO 27001/27017, SOC 2, PCI, HIPAA, SOX, GLBA, and NIST Special Publication 800-53.

Responsibilities

• Support delivery of DevSecOps and Secure SDLC programs through research, analysis of client environments, documentation of findings, and coordination across security domains.
• Assist with design and implementation of Secure by Design and security engagement intake workflows, including documenting processes, rationalizing questionnaires, supporting workflow configuration, and tracking approvals and cycle-time improvements.
• Help develop and maintain controls frameworks and mappings aligned with enterprise policies, standards, and regulatory requirements, and translate controls into engineering requirements and implementation tasks.
• Contribute to DevSecOps assessments and leading-practices workshops by preparing materials, gathering stakeholder input, analyzing gaps, and contributing to roadmaps, operating model options, and client recommendations.
• Support security integration into CI/CD and SDLC workflows by documenting controls, coordinating evidence collection, tracking release governance activities, and assessing software supply chain, container, and runtime security practices.
• Develop reports, metrics, dashboards, and presentation materials; maintain project documentation and action logs; and support day-to-day client communications.
• Contribute to business development, eminence, and internal enablement activities.
• Collaborate with team members and client stakeholders to manage deliverables, raise risks and dependencies, apply feedback, and build knowledge of DevSecOps, cloud security, and Secure SDLC practices.

Benefits

• Discretionary annual incentive program eligibility, subject to program rules and applicable factors.
• Professional development opportunities, including on-the-job learning, formal development programs, mentorship, skill-building, and leadership opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level