End-to-end product owner for the Data Security and Cloud/SaaS security tool domains. Runs the full product lifecycle: translating threat intelligence and compliance requirements into capability use cases, coordinating with Security Architecture on solution design, leading vendor evaluation, tracking investment value against regulatory and threat coverage, and driving decommission decisions.
Responsibilities
Own the end-to-end product lifecycle for the Data Security and Cloud/SaaS security tool domains.
Translate data security threat intelligence and compliance requirements into capability use cases.
Coordinate with Security Architecture on solution design, bringing the product and commercial view to their technical one.
Own a one to three year roadmap of investments and retirements aligned to data protection regulation including GDPR and GxP, and to cloud adoption patterns across GSK.
Lead vendor evaluation for data security and cloud/SaaS tooling.
Requirements
Bachelor's degree in a relevant discipline, or equivalent professional experience
Senior Security Engineer responsible for designing, implementing, and operationalizing AI Security and GenAI data protection capabilities across the AI Gateway platform.
Lead the full post‑sale lifecycle for enterprise customers, driving onboarding, adoption, renewal and expansion while building health scores and executive business reviews.
Responsibilities
Lead structured onboarding from kickoff
Drive adoption and ensure customers see value fast
Lead the design and implementation of cloud security architecture and strategy for Deloitte’s US Infrastructure and global teams.
Compensation
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $243,700.
Responsibilities
Define and drive cloud security strategy and roadmaps
Partner with US Infrastructure and Deloitte Global on cyber strategy
Architect and design secure cloud platform solutions
Lead cloud security architecture on projects across CSPs
Implement shift-left security controls in CI/CD pipelines
Requirements
Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
Nice to have: hands‑on experience with major public cloud platform
Nice to have: experience designing large‑scale secure solutions
Nice to have: knowledge of Palo Alto Networks Prisma Cloud and Cortex
Nice to have: cloud security certifications (AWS, GCP, Azure, CCSP)
Assist in designing, deploying, and managing cyber data protection solutions to secure Deloitte US Member Firm data and client data.
Compensation
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. A reasonable estimate of the current range is $84,300 to $173,300.
Responsibilities
Assist with the development, deployment, and support of cyber data protection solutions.
Assist with the implementation of data security controls and design principles.
Provide Tier 2 technical support to Deloitte end users for cyber data protection services.
Assist in maturing existing data protection solutions protecting against data exfiltration.
Assist in rolling out new data protection services for employees.
Requirements
Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
Lead the onboarding, adoption, and ongoing support of enhanced cyber data protection controls for large financial services and non-financial services client teams within Deloitte’s US Cyber Data Protection organization.
Compensation
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $84,300 to $173,300.
Responsibilities
Standardize, scale and implement proactive enhanced cyber security controls on Client Service Professionals laptops working across large client service teams in the US Member Firm.
Run Enhanced Control onboarding from start to finish, including questionnaire intake, policy creation, policy testing, policy tuning, policy rollout and on-going maintenance and support.
Tailor and adjust the control set to each Client’s requirements, including deciding which controls apply and how they are configured.
Deploy and maintain controls across Endpoint DLP, SMTP DLP, CASB, Web URL Filtering, Admin Rights Management, and software discovery and removal technologies.
Create and maintain Active Directory groups that support control deployment.
Requirements
Bachelor's degree in Information Technology, Computer Science, or Engineering
Senior Cybersecurity Engineer responsible for designing, implementing, and continuously improving enterprise security controls across network, endpoint, identity, cloud, and security operations domains.
Responsibilities
Design, implement, and maintain enterprise network security architecture including firewalls, segmentation, IDS/IPS, VPN, and secure remote access solutions.
Lead firewall rule reviews, optimization, and policy governance to ensure least-privilege and secure network access controls.
Engineer and manage endpoint security solutions including EDR/XDR, host-based firewalls, disk encryption, and endpoint hardening standards.
Architect and maintain Public Key Infrastructure (PKI), certificate lifecycle management, and encryption strategies for internal and external systems.
Design and support enterprise identity and access management (IAM) controls including Active Directory, Azure AD/Entra ID, SSO, MFA, conditional access, and privileged access management (PAM).
As a Senior Technical Engineer for SASE & SD-WAN, you will be a key technical resource responsible for the architecture, deployment, and optimization of our global network fabric, bridging the gap between traditional networking and cloud-native security.
Responsibilities
Lead the architecture and design of global SD-WAN overlays and Secure Access Service Edge (SASE) integrations, including ZTNA, CASB, and SWG.
Orchestrate the migration from legacy MPLS/VPN architectures to agile, software-defined solutions, ensuring minimal disruption.
Proactively collaborate with security teams to implement and enforce Zero Trust principles across the wide area network.
Act as the final point of escalation for complex network outages, applying advanced problem-solving to identify root causes and provide practical solutions.
Analyze traffic patterns and application performance to fine-tune Forward Error Correction (FEC) and Quality of Service (QoS) policies for optimal user experience.
The salary range for this position is $114,000 - $152,000 per year, plus an opportunity to earn additional incentive earnings.
Responsibilities
Engineer, configure, and support AI Gateway capabilities across evaluation, proof of concept, deployment, policy tuning, operational support, and continuous improvement.
Support phased implementation of AI security controls from monitor mode to warn and coach to targeted blocking.
Develop and tune controls for GenAI prompts, file uploads, browser traffic, embedded copilots, sanctioned AI platforms, and unsanctioned AI applications.
Implement inline remediation capabilities including redaction, quarantine, user coaching, warning, and blocking.
Develop instance aware controls that distinguish corporate from personal accounts and reduce the risk of sensitive data exposure.
Requirements
Bachelor's degree in Computer Science, Information Security, Information Technology, or related field
Senior Security Engineer -AI Security & GenAI Data ProtectionNewCitizens Bank · Johnston, US+6 more
Cybersecurity Architecture Manager - Cloud SecurityNewDeloitte · Birmingham, US