#DiscoveringDeloitte

At Deloitte, the spirit of the excellence is part of our DNA. We strive to hire the brightest minds from all around the globe, allowing us to excel in both long-term strategic thinking and business improvement implementation as the undisputed global leader in professional services. We are committed to delivering impacting results for diverse private and public organization clients, linking our peerless talent in cyber risk with unrivalled opportunities for impact – committing ourselves to sustainable growth and investment in our employees’ development and inclusion along the way.

Our culture is rooted in profound shared values. Our values guide us as we live our purpose to serve our clients with quality and distinction, inspire our people to work collaboratively to deliver value, actively contribute to society, and lead the profession by challenging ourselves to do what matters most. Deloitte’s values are what unite us across cultures and geographies, and ultimately help us earn the trust and respect of our people, clients, and society.

We are committed to reduce our impacts and encourage people to behave in a sustainability way. To protect the environment and limit climate change, we developed the WorldClimate strategy, through which we set a goal of becoming a Net Zero.

Join our #iAct movement! Here’s a quiz to know your carbon footprint and learn how to improve your green habits.

We believe that our differences enable us to #makeanimpactthatmatters.

#JobTitle

Senior Consultant DevSecOps, Cyber Application & Identity, Italy

#ChooseDeloitteIf

• You have the ability to turn a problem into an opportunity
• You are empathetic and able to grasp the needs of your colleagues and internal and external stakeholders
• You enjoy working in a challenging environment where priorities can change on a daily basis
• You like to have an overall project vision but always keep in mind the operationality to achieve the objectives

Technology continues to fuel rapid digital transformation and global hyper connectivity among businesses and governments, presenting unique opportunities and challenges for growth as well as cybersecurity risks to manage. To effectively navigate this increasingly complex ecosystem, we strive to offer advisory services related to the management of information security at the application level at 360°: from authentication (Identity) to governance and technical aspects. How do we do this? We work on these 3 main macro-categories of projects:

• SAP-security
• Identity & Access Management
• DevSecOps/ application vulnerability management from a process perspective and from an implementation perspective

Our strength? We are able to support our clients by establishing a solid and lasting relationship, becoming their Strategic Advisor on cyber issues.

#Yourrole

As a Consultant/Senior Consultant in the Cyber Application & Identity Team, you will have the opportunity to share your experience and knowledge with younger colleagues, starting to develop leadership skills, and identifying the best solution for the client, dealing with:

• Analysis of customers' IT and OT infrastructures in order to identify appropriate application security solutions against advanced cyber attacks and reduce exposure to application threats
• Identification of Best Practices in application and product security and digital security solutions
• Development of security requirements for connected (IoT) and mobile products
• Development and implementation of the approach “security-by-design”

#WinningRequirements

• 3 years of experience (grade Senior Consultant), 1 year of experience (grade Consultant) preferably in consulting companies

• Skills in Application Security with particular reference to Security Architecture: application protection (Code review, SDLC), knowledge of network architectures and the main authentication, security and communication protocols (e.g. SAML, TLS/SSL, HTTPS, etc.), with reference also to the mobile context (es. Android, iOS)
• Good knowledge of main programming languages (es. Java, C#, Python)
• Experience in DevSecOps Pipeline: creation and implementation of a DevSecOps pipeline through CICD automation tools such as Jenkins, IBM-AppScan, BurpSuite, open source tools, API/docker and microservices
• Good knowledge in:
  • Cloud: main platforms (AWS, Google, Azure) and related security aspects
  • Identity & Access Management: knowledge of digital identity management architectures, with particular reference to provisioning, SSO integration, authentication, etc.
• Degree in technical/scientific subjects
• Availability to travel in Italy and abroad
• Fluent knowledge of the English language

#Nicetohave

• DevSecOps certifications
• Certifications in information security/IT Audit (es. ISO/IEC 27001 LA, CISSP, CISM)

Build your legacy with us. Aim higher: join Deloitte now!

-

Deloitte is an equal opportunity employer (EOE) and we are committed to providing a working environment that embraces and values diversity and inclusion. Knowing that people work best in different ways, we are happy to discuss alternative arrangements if the working pattern you are looking for is not specifically indicated. If you have any support or access requirements, we encourage you to advise us at the time of application to assist you through the recruitment process

#LI-Hybrid