Security Engineer

Are you looking to elevate your cyber career? Your technical skills? Your opportunity for growth? Deloitte's Government and Public Services Cyber Practice (GPS Cyber Practice) is the place for you! Our GPS Cyber Practice helps organizations create a cyber minded culture and become stronger, faster, and more innovative. You will become part of a team that advises, implements, and manages solutions across five verticals: Strategy, Defense and Response; Identity; Infrastructure; Data; and Application Security. Our dynamic team offers opportunities to work with cutting-edge cyber security tools and grow both vertically and horizontally at an accelerated rate. Join our cyber team and elevate your career.

Work you'll do:

Designs, implement, tune, and manage security solutions for development, applications, platforms, and environments (cloud, on-prem, SaaS) while integrating existing security tools.

Performs vulnerability assessments to identify weaknesses and countermeasures and providing timely assessment reports to key stakeholders.

Conducts manual and automated code and configuration reviews to identify application and infrastructure vulnerabilities with integration to Continuous Integration / Continuous Deployment (CI/CD) pipelines.

Manages the end-to-end vulnerability life-cycle from discovery to closure including scanning, reviewing vulnerabilities, and prioritizing vulnerabilities based on threat intelligence and attack surface of assets.

Supports compliance and Security Assessment and Authorization (SA&A) processes activities, recommending security controls and corrective actions to mitigate vulnerability risks.

The team

Deloitte's Government and Public Services (GPS) practice - our people, ideas, technology and outcomes-is designed for impact. Serving federal, state, & local government clients as well as public higher education institutions, our team of more than 15,000 professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise

At Deloitte, we believe cyber is about starting things-not stopping them-and enabling the freedom to create a more secure future. Cyber Infrastructure is focused on rethinking how security is integrated across modernized infrastructure as cyber threats become more complex. If you're seeking a career implementing, architecting, and-in select cases-handling next generation controls to manage security risks and exposure, then the Cyber Infrastructure team at Deloitte is for you.

Qualifications

Required:

• 2 years of experience designing, implementing, and tuning security solutions for development, applications, platforms, environments
• 2 years of experience integrating and optimizing existing and new security tools and using the suite of tools to continuously improve the security posture
• 2 years of experience performing vulnerability assessments and reporting
• 2 years of experience implementing and validating security controls in support of SA&A / ATO
• Strong critical thinking skills
• Strong understanding of Federal zero trust requirements
• Bachelor's degree required
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• Must be able to obtain and maintain the required clearance for this role

The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $61,000-$91,000.

Preferred:

• Security / CISSP / or Similar Security certification
• Cloud security certification (AWS/Azure)