Deloitte Recruitment Program | Hiring Application Security Tester – Apply Now!

Qualifications

• Education (degree): Bachelor’s Degree or equivalent experience
• Skills/Abilities:
  • Experience using common testing tools like Fortify Static Code Analyzer & Web Inspect, Contrast Assess and Scan, Burp, OWASP ZAP, Postman, Swagger, NMAP, SQLMap and others.
  • Static Application Software Testing
  • Dynamic Application Testing
  • OWASP Application Security Top 10
  • OWASP API Security Top 10
  • OWASP Thick Client Top 10
  • Familiarity with software security weakness and recent vulnerabilities
  • Working knowledge of at least one scripting language (e.g., Python, Powershell)
  • Familiarity with at least one software programming language and framework (e.g., C#, Java, JavaScript)
  • Azure cloud and infrastructure
  • Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
  • Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
  • Strong written and verbal communication skills

Preferred Education, Qualifications, and Experience Settings

• Certified Ethical Hacker (CEH)
• Offensive Certified Security Professional (OSCP)
• Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN).

Job Description & Responsibilities:

As part of the Global Cybersecurity team, responsibilities will be to work with customers to deliver technical assessments against a broad range of services, illustrative duties will include:

This role is responsible for providing automated application testing services as part of the shared services organization for member firms. Said responsibilities would include:

• Assisting in technical scoping of security testing activities
• Executing security testing:
  • Static Application Security Testing
  • Dynamic Application Security Testing
  • Interactive Application Security Testing
  • Software Composition Analysis
• VM Management – Infrastructure Activities
• DevOps – Issue Analysis and Configuration knowledge
• Conducting focused research when not deployed on an active project
• Providing consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
• Enhancing and updating testing methodologies, processes and standards documentation
• Maintaining proficiency of knowledge through ongoing training paths
• Analyzing and understanding complex architecture designs.
• Ability to effectively communicate what services and capabilities our group can facilitate to our clients.