Senior Information Security Analyst - SP

Description

Job Summary: A Senior Information Security Analyst supports the integration and evolution of security across the entire application development lifecycle, assists in incident response, and drives continuous improvement. Key Highlights: 1. Career growth within a diversified service portfolio 2. Involvement in DevSecOps and application development security 3. Collaborative environment with diverse teams ### **You at Deloitte:** You will have the opportunity to advance your career within an organization offering the world’s most diversified professional services portfolio, serving as a **Senior Information Security Analyst** on the **Information Security** team. In your day-to-day work, you will: * Participate in the Security-by-Design process for applications, embedding security into the development process; * Enhance DevSecOps practices by integrating security controls into CI/CD pipelines and development workflows; * Define security controls and oversee the entire SDLC; * Analyze, prioritize, support, and track remediation of vulnerabilities identified in applications, APIs, microservices, and integrations; * Create, maintain, and evolve security controls for APIs, microservices, and distributed applications; * Support dissemination of the SDLC process by developing materials and training development teams; * Define and enhance application security metrics and KPIs (e.g., vulnerability remediation SLA, scan coverage); * Assist in configuring and maintaining security tools in collaboration with the global Cyber Security team; * Engage in troubleshooting and periodic meetings with the global Cyber Security team; * Support information security incident response and issue resolution; * Create and maintain procedures and knowledge base. At Deloitte, we seek individuals who aim to generate positive impact every day. We empower talent to grow in a collaborative environment with diverse teams that bring energy, empowerment, interaction, and connection. Our exponential growth stems from recruiting talents whose core values align with ours. Leading the way, fostering inclusion, collaborating to measure impact, serving with integrity, and caring for one another are essential and non-negotiable principles that further strengthen our purpose. *We believe in the power of the talents we develop. They truly transform organizations, drive more talent, and create opportunities. Ready to join the world’s largest professional services organization?* ***Choose Your Impact***. ### **What do you need to apply for this position?** * Proven experience in Information Security / Cyber Security; * Knowledge of security tools such as Firewall, MDM, Proxy, Web Filtering, Endpoint Protection, IDS/IPS, and VPN; * Experience acting as an architect and facilitator bridging security, development, and business; * Experience with CI/CD (GitLab, GitHub, Azure DevOps, etc.); * Advanced knowledge of application architectures, including Docker and Kubernetes; * Practical experience with DAST, SAST, SCA, and vulnerability management tools; * Practical programming and automation skills (JavaScript, TypeScript, Python), with strong proficiency in Git, collaborative version control, and workflow automation; * Knowledge of LAN/WAN networks and Windows and Linux operating systems; * Familiarity with public cloud platforms and on-premises environments; * Mastery of security principles, standards, and best practices, including OWASP Top 10, secure coding, cryptography, authentication, authorization, access control, and security testing throughout the SDLC. **We look forward to welcoming you to this team!**