Application Security Analyst, Deloitte Global Technology

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.

What will your typical day look like?

Work you'll do

• Conduct application security testing in the form of DAST, SAST, SCA, container scanning, and manual verification techniques.
• Analyze source code and application security test results to determine contextual risk (via CVSS) and explain threats to developers and application teams.
• Provide remediation guidance on true positive application security test results.
• Assist application teams in integrating application security testing into automated DevSecOps workflows (i.e., IDEs, code repositories, image registries, and CICD pipelines) including both deployment and troubleshooting.

About the team

Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in what is but rather what can be to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.

Enough about us, let’s talk about you

Qualifications

• Education (degree): Bachelor’s Degree or equivalent experience

• Skills/Abilities:
  • Experience in conducting Static, Dynamic, Interactive Application Software Testing, and Software Composition Analysis using common testing tools such as Snyk, Fortify, Contrast Security, Burp, OWASP ZAP, Postman, Swagger, NMAP, SQLMap, and others.
  • Knowledge of OWASP Application Security Top 10 for Web Applications, API, Open Source, and LLMs
  • Familiarity with the CWE Top 25 and recent trends in public vulnerabilities and zero-days
  • Ability to both read and write with at least one scripting language (e.g., Python, Powershell, etc.)
  • Ability to read and comprehend at least one full stack development language and/or framework (e.g., C#, .NET, Java, etc.)
  • Familiarity with DevOps tools such as Azure Repos, Github, Azure Pipelines, Github actions, etc.
  • Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
  • Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
  • Strong written and verbal communication skills

Total Rewards

The salary range for this position is $58,000 - $96,000, and individuals may be eligible to participate in our bonus program. Deloitte is fair and competitive when it comes to the salaries of our people. We regularly benchmark across a variety of positions, industries, sectors, targets, and levels. Our approach is grounded on recognizing people's unique strengths and contributions and rewarding the value that they deliver.

Our Total Rewards Package extends well beyond traditional compensation and benefit programs and is designed to recognize employee contributions, encourage personal wellness, and support firm growth. Along with a competitive base salary and variable pay opportunities, we offer a wide array of initiatives that differentiate us as a people-first organization. On top of our regular paid vacation days, some examples include: $4,000 per year for mental health support benefits, a $1,300 flexible benefit spending account, firm-wide closures known as "Deloitte Days", dedicated days of for learning (known as Development and Innovation Days), flexible work arrangements and a hybrid work structure.