Senior/Assistant Manager - Application Security (Penetration Tester)

What impact will you make?

At Deloitte, we offer a unique and exceptional career experience to inspire and empower talents like you to make an impact that matters for our clients, people and community. Whatever your aspirations, Deloitte offers you a highly inclusive, collaborative workplace and unrivalled opportunities to realize your full potential. We are always looking for people with the relentless energy to push themselves further, and to find new avenues and unique ways to reach our shared goals.

So what are you waiting for? Join the winning team now.

Work you’ll do

• Assisting in technical scoping of security testing activities
• Curation and assessment of vulnerability data (across multiple platforms/tools) from a manual penetration perspective, to focus on true exploitation;
• Typical security testing activities;
  • Software/Web Application/Web Services penetration testing
  • Network Penetration Testing
  • Mobile Application Penetration Testing
  • Thick Client Penetration Testing
• Conducting focused research when not deployed on an active project
• Provide  consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally
• Architecture Security Analysis and Threat Modeling as required
• Curation and assessment of vulnerability data (across multiple platforms/tools) from a code assessment perspective, to ensure false positive review and analysis to provide target results to customers
• Provide technical guidance in supporting member firms in conducting necessary remedial actions and responding to client vulnerability questions or disclosures
• Help develop tooling deployment and relevant scanning configurations to enhance practical testing processes
• Operate in the wider organisation to drive risk reduction goals and in the continuous improvement vulnerability related services
• As needed to meet customer requests support code assessment and network infrastructure

Your role as a leader

At Deloitte, we believe in the importance of empowering our people to be leaders at all levels. We expect our people to embrace and live our purpose and shared values, challenging themselves every day to identify issues that are most important to our clients, our people and the communities, and to make an impact that matters. In addition to living our purpose, Senior Associates / Senior Consultants / Assistant Manager across our Firm are expected to:

• Understand objectives for stakeholders, clients and Deloitte whilst aligning own performance to objectives and sets personal priorities.
• Develop themselves by actively seeking opportunities for growth, shares knowledge and experiences with others, and acts as a strong brand ambassador.
• Seek opportunities to challenge themselves, collaborate with others to deliver and takes accountability for results.
• Build relationships and communicates effectively in order to positively influence peers and stakeholders.
• Work effectively in diverse teams within a highly inclusive team culture where everyone is supported, respected and recognized for their contribution.

Requirements

• Minimum of 2 years experience working in a professional environment preferably as part of an operational security function (application testing, penetration testing, and/or red teaming). Fresh graduates are welcomed.

• Hold professional certifications e.g. OSCP, OSCE, OSEE, GPEN, CREST CRT, CRTP, CRTE, CEH or other security certifications is preferred

• Proven experience working with variety of cultures across the globe and have the patience, understanding and empathy to work collaboratively and effectively

• Capable of thinking creatively and analytically to prioritise tasks effectively

• Must be able to work under pressure and produce content to tight timelines

• Ability to self-manage, prioritising a variety of tasks

• Excellent planning skills

• Good communication and interpersonal skills
• Able to speak English fluently
• Able to manage clients expectation assertively

• Credible stakeholder management and relationship building skill

Due to volume of applications, we regret only shortlisted candidates will be notified. Candidates will only be contacted by authorized Deloitte Recruiters via firm’s business contact number or business email address.