Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your Work Profile
Responsible for validating security controls and remediation measures implemented by Development and DevOps teams, ensuring vulnerabilities are effectively addressed and applications meet Secure SDLC and compliance requirements.
Key Responsibilities
- Validate security controls and vulnerability remediations across applications and cloud environments.
- Verify authentication, authorization (RBAC/ABAC), input validation, secure configurations, and API security controls.
- Re-test vulnerabilities and confirm remediation effectiveness using positive, negative, and edge-case testing scenarios.
- Perform security regression testing to ensure fixes do not introduce current risks.
- Review and validate findings from SAST, DAST, SCA, and Threat Modeling activities.
- Collaborate with Development, DevOps, Security, and QA teams throughout the Secure SDLC lifecycle.
- Maintain security testing evidence, reports, and vulnerability tracking.