Roles and Responsibilities

As a Senior Consultant, you are responsible for performing following activities as a SAST/DAST qualified:

- Integrate SAST and DAST tools into CI/CD pipelines to automate security testing throughout the development lifecycle.
- Perform regular static (SAST) and dynamic (DAST) security assessments on applications to identify vulnerabilities such as SQL injection, cross-site scripting, and other OWASP Top 10 risks.
- Analyze scan results, triage findings, and provide actionable remediation guidance to development teams.
- Collaborate with developers to ensure secure coding practices and support secure design reviews.
- Define and maintain security roles, responsibilities, and ownership between Deloitte and client stakeholders for test preparation, execution, and support.
- Ensure that vulnerabilities are tracked, reported, and resolved in accordance with organizational policies and client requirements.
- Conduct root cause analysis (RCA) workshops and publish performance and security testing reports.




- Stay current with industry trends, emerging threats, and advancements in SAST/DAST tools and methodologies.

Job Requirements

- 7-9 years of hands-on experience with leading SAST and DAST tools (e.g., Checkmarx, Veracode, Fortify, Burp Suite, OWASP ZAP).
- Strong understanding of secure software development lifecycle (SSDLC) principles and OWASP Top 10 vulnerabilities.
- Experience integrating security testing into CI/CD pipelines (e.g., Jenkins, Azure DevOps, GitLab CI).
- Ability to interpret and communicate vulnerability findings and remediation steps to technical and non-technical stakeholders.
- Familiarity with both black-box (DAST) and white-box (SAST) testing methodologies.
- Excellent collaboration, communication, and documentation skills.
- Excellent collaboration, communication, and documentation skills.

Good to Have Skills/Project Experience/Certifications:

📌 DevSecOps + Anthropic (Bengaluru)
🏢 Deloitte US-India Offices
📍 Bengaluru