Manager, Security Engineer – Financial Services, Enterprise Security

Overview

In this role you will help secure clients’ technology capabilities within Deloitte’s Cyber Security practice. You will work on designing, implementing and operating security solutions across cloud, on-premise and hybrid environments for financial services clients. You will collaborate with cross-functional teams to shape secure architectures, pipelines and controls that enable safe digital transformations. This is an opportunity to grow technically and contribute to a high-impact security program within a global firm.

Pay / Benefits

• hybrid working policy
• return-to-work coaching
• world-class development
• wellbeing support
• flexible working arrangements
• career growth opportunities

Responsibilities

• Design and build secure infrastructure across public, private and hybrid clouds using infrastructure-as-code
• Develop and integrate secure CI/CD pipelines with up-to-date security checks
• Create and deploy security tooling covering endpoint, network, cloud posture, SIEM and related areas
• Operate SbD (Secure by Design) procedures and produce security artefacts
• Contribute to security architectures and solution designs
• Tune security controls (WAF, firewalls, monitoring and alerts) and drive configuration improvements
• Conduct risk assessments and vulnerability scoping to identify threats
• Help clients develop security technology roadmaps and realistic engineering estimates
• Stay current with emerging threats and best practices to propose improvements

Key requirements

• Hands-on cloud experience (AWS, Azure, or GCP)
• Hands-on CI/CD tooling experience
• Proficiency with infrastructure-as-code (Terraform)
• Scripting/programming skills (Python, Bash, PowerShell)
• Experience building/deploying microservices
• Experience with security technologies (firewalls, IDS/IPS, vulnerability scanning, WAFs, CASBs, SIEMs, CSPMs)
• Experience contributing to security architectures and designs
• Understanding of security principles and risk framing in business terms
• Understanding of Agile, SCRUM and Continuous Delivery

• Agile thinker
• Stakeholder management
• Collaborative working
• Public cloud environments (AWS, Azure, GCP)
• CI/CD tooling
• Infrastructure-as-code (Terraform)

…