Cybersecurity DevSecOps & Controls Engineer, Senior Consultant

Company: Deloitte
Location: Grand Rapids
Posted on: May 16, 2022

Job Description:

Do you thrive on developing creative and innovative insights to solve complex issues? Want to work on next-generation, cutting-edge products and services that deliver outstanding value and that are global in vision and scope? Work with other experts in your field? Work for a world-class organization that provides an exceptional career experience with an inclusive and collaborative culture?Want to make an impact that matters? Consider Deloitte Global.Work you'll do:You will partner with the GTS Product Development & Solution Engineering teams' leaders to create, implement and apply DevSecOps principles, processes and culture. You will provide subject matter expertise on DevSecOps, leading our engineering teams in building secure software and implementing security controls and tests in an Agile development environment. You will advocate to the engineering teams advanced Cybersecurity, DevSecOps, and Agile engineering procedures such as secure coding practices, code reviews, quality engineering practices (i.e., unit, full-build, and security testing) and advanced requirement capturing techniques for improving end-to-end secure delivery practices. Additional responsibilities may include:

• Work to harden cloud infrastructure from attacks by implementing automated and integrated release cycles incorporated within the Agile Security Software Development Lifecycle's (SSDL) tools and processes.
• Strive to bring excellence and simplicity in DevSecOps design, adoption and implementation, acting as trusted cybersecurity advisor to the engineering teams across GTS and member firms.
• Responsible for day-to-day collaboration with the engineering teams to ensure successful implementation of secure coding practices and consistent automation and integration of the DevSecOps processes across Deloitte.
• Support and maintain the Secure Systems Development Lifecycle (SSDLC) including functional and non-functional cybersecurity requirements for all new applications.
• Work with the Cybersecurity Strategy and Governance group to implement setup and updates in the cybersecurity assessment processWhat you'll be part of - our Deloitte Global Culture:At Deloitte, we expect results. Incredible-tangible-results. And Deloitte Global professionals play a unique role in delivering those results. We reach across disciplines and borders to serve our global organization. We are the engine of Deloitte. We develop and implement global strategies and provide programs and services that unite our network.In Deloitte Global, everyone has opportunities. We see the importance of your perspective and your ability to create value. We want you to fit in-with an inclusive culture, focus on work-life fit and well-being, and a supportive, connected environment; but we also want you to stand out-with opportunities to have a strategic impact, innovate, and take the risks necessary to make your mark. What you'll be part of-our Deloitte Global culture:At Deloitte, we expect results. Incredible-tangible-results. And Deloitte Global professionals play a unique role in delivering those results. We reach across disciplines and borders to serve our global organization. We are the engine of Deloitte. We develop and implement global strategies and provide programs and services that unite our network.In Deloitte Global, everyone has opportunities. We see the importance of your perspective and your ability to create value. We want you to fit in-with an inclusive culture, focus on work-life fit and well-being, and a supportive, connected environment; but we also want you to stand out-with opportunities to have a strategic impact, innovate, and take the risks necessary to make your mark.Who you'll work with:Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. --- Bachelor's degree in computer science, computer engineering, technology-related field, or equivalent work experience
  • 4+ years of combined experience in software engineering, and DevOps/DevSecOps, preferably in an information security context
  • Experience with threat modeling of application designs and data flows to identify potential weaknesses
  • Experience creating abuse cases for functional security testing
  • Programming skills in one or more of the following programming and markup languages: Java, .Net, Terraform, Python, Visual Basic, PowerShell, Bash, C++, C#, Django, JavaScript, HTML, CSS, etc.
  • Experience with secure programming and identifying potential flaws in codes to mitigate vulnerabilities
  • Ability to translate traditional SDLC approach (plan, code, build, test, release, deploy and monitor) to the phases of agile development when writing software to automate security related tasks
  • Hands-on experience with containerization, orchestration, and Cloud infrastructure management (e.g., Infrastructure as Code, immutable infrastructure, Configuration as Code, etc.)How you'll grow:Deloitte Global inspires leaders at every level. We believe in investing in you, helping you embrace leadership opportunities at every step of your career, and helping you identify and hone your unique strengths. We encourage you to grow by providing formal and informal development programs, coaching and mentoring, and on-the-job challenges. We want you to ask questions, take chances, and explore the possible.Benefits you'll receive:Deloitte's Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being needs. We provide the benefits, competitive compensation, and recognition to help sustain your efforts in making an impact that matters.Corporate citizenship:Deloitte is led by a purpose: to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our people, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities. #LI-Hybrid Hybrid work, remote may be an option

Keywords: Deloitte, Grand Rapids , Cybersecurity DevSecOps & Controls Engineer, Senior Consultant, Professions , Grand Rapids, Michigan