About the Company
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
About the Role
This role is responsible for providing penetration testing services through a combination of technology and manual ingenuity as part of the Global cyber services organization for member firms.
Responsibilities
Work you'll do
Assisting in technical scoping of security testing activitiesExecuting security testing:Web Application Penetration TestingWeb Services / Application Programming Interface (API) Penetration TestingNetwork Penetration TestingMobile Application Penetration TestingThick Client Penetration TestingConducting focused research when not deployed on an active projectProvide consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.Enhancing and updating testing methodologies, processes and standards documentationMaintaining proficiency of knowledge through ongoing training pathsProficient at analyzing and understanding complex architecture designs.Ability to effectively communicate what services and capabilities our group can facilitate to our clients.
Qualifications
Experience using common testing tools like Burp, OWASP ZAP, Metasploit, Postman, Swagger, NMAP, Qualys, SQLMap, others.Experienced with Kali Linux or other dedicated Penetration Testing OS PlatformAdvance mobile penetration testing, Application Penetration Testing and architectural security principlesFamiliarity with software security weakness and vulnerabilitiesWorking knowledge of one scripting language and familiarity with at least one software programming language and frameworkDemonstrated experience working with diverse stakeholders, preferably on a global multi-national basisAbility to manage concurrent initiatives and use effective judgment in prioritization and time managementStrong written and verbal communication skillsMust be a US Citizen
Preferred Skills
Certified Ethical Hacker (CEH) CertificationOffensive Certified Security Professional (OSCP) CertificationAny GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN)OWASP Application Security Top 10OWASP API Security Top 10OWASP Thick Client Top 10OWASP LLM Top 10MITRE ATT&CK FrameworkCloud Service testingReverse EngineeringStatic Application Software Testing (SAST)Dynamic Application Testing (DAST)Experience of Agentic development and its application to support penetration testing.Limited immigration sponsorship may be available in some locations