Security Test Lead
About The Position
Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. Work You'll Do Consultant is responsible for guiding the security architecture, solution design, and implementation of cybersecurity practices across cloud-based and enterprise applications. This role will drive secure practices for application security development, proactively identify and remediate vulnerabilities, and support the team in aligning with government and industry security standards. The ideal candidate should have robust background in cybersecurity delivery for government agencies and hands-on experience with leading security tools. Serve as the functional lead overseeing security design and assessment of application changes and cloud security solutions for client projects Evaluate, design, and implement security controls in alignment with government security requirements and best practices. Knowledge of Snyk, Invicti, and BurpSuite a must, ensuring comprehensive scanning, remediation, and reporting. Provide expert guidance on secure solution architecture within AWS, supporting large-scale deployments for regulated environments. Conduct risk assessments, code reviews, penetration testing, and ensure ongoing compliance with federal and state standards. The Team Deloitte's Government and Public Services (GPS) practice - our people, ideas, technology, and outcomes-are designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. Our Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring technology, data analytics, and threat intelligence. Helps manage and protect dynamic attack surfaces and provides rapid crisis and cyber incident response, ensuring clients can be ready for, respond to, and recover from business disruptions.
Requirements
- Bachelor's degree or equivalent experience required.
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
- Must be able and willing to work on-site at client office in Sacramento, CA
- A minimum of 2-5 years' experience doing Application Security work
- 1-3 years' experience working with NIST Cyber Security Framework
- Foundational knowledge of Security and Privacy By Design
- Knowledge of application security tools such as Invicti, Snyk, or Burpsuite
- An AWS certification
Nice To Haves
- Experience working inside a PMO
- Release and Configuration Management knowledge
- AWS Certified SysOps Administrator
Responsibilities
- Serve as the functional lead overseeing security design and assessment of application changes and cloud security solutions for client projects
- Evaluate, design, and implement security controls in alignment with government security requirements and best practices.
- Knowledge of Snyk, Invicti, and BurpSuite a must, ensuring comprehensive scanning, remediation, and reporting.
- Provide expert guidance on secure solution architecture within AWS, supporting large-scale deployments for regulated environments.
- Conduct risk assessments, code reviews, penetration testing, and ensure ongoing compliance with federal and state standards.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Industry
Professional, Scientific, and Technical Services
Number of Employees
5,001-10,000 employees
