We are looking for an expert in Application Security to join our team at Deloitte. You will be responsible for defining, establishing, and ensuring secure development practices, working closely with IT, Product Development, and Security teams. Your role will focus on transforming the secure software development lifecycle (SSDLC), ensuring continuous end-to-end security monitoring, and detecting and mitigating risks.
Requirements
- More than 3 years of experience in software and application security, SSDLC, and AppSec
- Specific training and/or certifications in application security and secure development
- Knowledge and experience in threat modeling, security design reviews, secure architectures, and development patterns
- Experience in evaluating service maturity, projects, or processes, as well as breach analysis (GAP analysis)
- Knowledge of security standards such as OWASP, MITRE CWE/CVE, ASVS
- Experience in CI/CD, DevSecOps, and process automation
- High-level knowledge of Cloud architectures (AWS, Azure, or GCP)
- Fluent English, B2, and the ability to generate technical documentation and security results presentations
Benefits
- Good environment within and outside the office
- Integral well-being
- Social impact
- Culture of feedback and continuous learning