Summary
Position Summary
JobDescription:CyberRiskApplication Security Consultant
Are you interested in improving the cyber and organizationalrisk profiles of leading companies? Do youwanttobeinvolvedindeliveringFusionManaged/AttackSurfaceManagement(ASM)Services including identifying potentially vulnerable IT assets or weak security configurations within their networks in real time? Are you excited about rapidly changing operational environments, learning what you need to get the job done, and producing accurate and timely results?Ifyes,thenDeloitte’sFusionManaged Services(FMS)teamcould betheplaceforyou!Transparency, innovation,collaboration,sustainability:thesearethehallmarkissuesshaping cyberinitiativestoday. Deloitte’s FMS business is passionate about making an impact with lasting change.Delivering our industry leading services requires fresh thinking and a creative approach. We collaborate with teams from across our organization in order to bring the fullbreadth ofDeloitte, its commercialand public sector expertise, to best support our clients.Our aspiration is to be the premier integrated services provider in helping to transform the cyber security services marketplace.Ourteamisclientfocusedandmissiondriven.AsaCyberRiskFusionAttackSurfaceSeniorAnalyst inDeloitte'sFusionManagedServices,you’llworkwithourdiverseteamsofpassionateprofessionals to help solve for some of today’s toughest cybersecurity challenges to enable or clients to achieve business growth and manage risk.
Workyou’ll do
AsaFusionAttackSurfaceConsultant,youwillassistourclientswithdiscoveringvulnerabilitiesand rogue assets (such as shadow IT)in their networks as part of a team of engineers and analysts around the world who specialize in the tactics, tools and proceduresused by cyber criminals.
- Configureandexecutevulnerabilityscansenumeratingvulnerabilitieswithintheinternaland external network
- Analyze,enrichandprioritizespecificactivitiesdesignedtoremediatediscovered vulnerabilities such as patch deployment or configuration hardening
- Assist inproducingacomprehensiveoperatingpictureandcybersecuritysituational awareness
- Work with various vulnerability threat feeds (such as vendor bulletins), assessment tools, assetinventorytoolsaswellasreporting toolsand frameworkstomatchassetstoidentified vulnerabilities and produce reports
- Respond torequestsfor ad-hocreporting andresearchtopicsfrommanagementand analysts as required
- Identifygapsinavailableassetinformationandengagewithleadershiponstrategiestomeet service-level requirements through affirmative handoff with remediation partners
- Quicklyunderstandanddeliver oncompanyandcustomer requirements
- Aidinandparticipateindaily,weekly,quarterly,andyearlyproductionreporting forclients, partners, and internal teams
- AdheretointernaloperationalsecurityandotherDeloitte policies
Qualifications Required:
- Bachelor'sdegreeorhigherinAttackSurfaceManagement,InformationSecurity,Information Technology, Computer Science, Math, or any other related area
- 3-5 years of experience working in information technology vulnerability management, informationsecurity,incidentresponse,redteamoperations,applicationsecurity,reverse engineering, or other technical cyber security roles
- CertifiedInformationSystemsSecurityProfessional(CISSP),Certification inCertifiedIntrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent
- Understandingofpossibleattackactivitiessuchasnetworkprobing/scanning,DDOS, malicious code activity, etc.
- Understandingofcommonnetworkinfrastructuredevicessuchasroutersand switches
- UnderstandingofbasicnetworkingprotocolssuchasTCP/IP,DNS, HTTP
- UnderstandingofvulnerabilityclassificationusingNationalVulnerabilityDatabase nomenclature such as CVE/CVSS
- Basicknowledgeinsystemsecurityarchitectureandsecurity solutions
Preferred:
- Provenabilitytotranslatecomplex informationsetsintospecificrecommendationsthatcan be actioned by customers to enhance their security posture
- Familiaritywithcyberthreats,defenses,motivationsand techniques
- ExperiencewithvulnerabilityanalysistoolssuchasQualysorTenable,andtheasset provisioning/deprovisioning lifecycle
- PatchmanagementskillsandtechnologyapplicationsuchasMicrosoftSystemCenter Configuration Manager (SCCM)
- Experiencedistillingrawinformation intoactionable intelligence
- OutstandingEnglishwrittenand oralcommunicationskillsand theabilitytoprioritize work
- Strongunderstandingofthreatanalysisandenterpriselevel,mitigation strategies
- Workingknowledgeofhowmaliciouscodeoperatesandhowtechnicalvulnerabilitiesare exploited
- Strongknowledgeofoperatingsystemsandnetworkingtechnologiesin general
- Strongknowledgeofdatabases,querydesign,andhowtoanalyzedatathus obtained
- KnowledgeofsupportingtoolsetssuchasConfluence,Jira,andConfigurationManagement Databases (CMDB) such as ServiceNow
- Stronganalyticalandproblem-solving skills
- Self-motivatedtoimproveknowledgeand skills
- Astrongdesiretounderstandthewhat aswellasthewhy andthehowof security incidents
The team
At the core of our Application Security Managed Services Team professional’s monitors, collects and analyses security related issues on application environment (both at code level and infrastructure level), that may potentially become a threat to an organization. This detection of application threats/vulnerabilities is carried out using a unique blend of our application security testing and monitoring tools and intelligence data collected through our vast experience within the Advise and Implement business
Howyou’ll Grow
AtDeloitte,ourprofessionaldevelopmentplanfocusesonhelpingpeopleateveryleveloftheircareer to identify and use their strengths todo their best work every day. From entry-level employees tosenior leaders, we believe there’s always room to learn. We offer opportunities to help sharpenskills in addition to hands-on experience in the global, fast-changing business world.From on-the-job learningexperiencestoformaldevelopmentprogramsatDeloitteUniversity,ourprofessionalshavea variety of opportunitiestocontinuetogrowthroughout their career. ExploreDeloitteUniversity,The Leadership Center.
Benefits
At Deloitte, we know that great people make a great organization. We value our people and offer employeesabroadrangeofbenefits. LearnmoreaboutwhatworkingatDeloittecanmeanforyou.
Deloitte’s culture
Our positive and supportive culture encourages our people to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them theflexibility to make daily choices that can help them to be healthy, centered, confident, and aware. We offer well-being programsandarecontinuouslylookingfornewwaystomaintainaculturewhereourpeopleexceland lead healthy, happy lives. Learn more about Life at Deloitte.
Corporate citizenship
Deloitte is led by a purpose: to make an impact that matters.This purposedefines who we are and extendsto relationships with our clients, our people and our communities.We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadershiptohelpdrivepositivesocialimpactinourcommunities. LearnmoreaboutDeloitte’simpact on the world.
Recruiter tips
WewantjobseekersexploringopportunitiesatDeloittetofeelpreparedandconfident.Tohelpyou with your interview, we suggest that you do your research: know some background about theorganizationandthebusinessareayou’reapplyingto. CheckoutrecruitingtipsfromDeloitte professionals.
Our purpose
Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.
Our people and culture
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ideas and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Professional development
At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .
Benefits To Help You Thrive
At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.
Recruiting tips
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.Requisition code: 306012
