Véritable référent technique, vous aurez pour mission de structurer et de faire évoluer notre expertise en cybersécurité, en particulier autour du Cloud Security, du Network Security et de l'automatisation des opérations SecOps.
Responsibilities
Être le référent technique de l'équipe SecOps et accompagner les consultants dans leur montée en compétences.
Définir les standards, architectures et bonnes pratiques de sécurité, tout en challengeant les choix technologiques sur AWS, Azure et Microsoft Security.
Intervenir sur les problématiques complexes, animer les revues techniques et assurer une veille technologique.
Porter la roadmap technique et industrialiser les processus d'onboarding, les contrôles de sécurité, le scoring et le reporting.
Développer les capacités de contrôle sur AWS, Azure et Microsoft 365.
Lead information security liaison for KPMG Canada’s Audit Business Unit, managing risk, compliance, and security controls across client engagements and internal operations.
Compensation
The expected base salary range for this position is $146,000 to $196,000 and may be eligible for bonus awards.
Responsibilities
Serve as primary information security liaison between Audit and Digital Security Group
Develop understanding of Audit applications and security controls
Support reviews of security-related client contract conditions
Lead security-facing coordination for major client assessments
Coordinate client security communications
Requirements
Bachelor’s or Master’s degree in Information Technology, Computer Science, Cyber Security or a related field, or equivalent experience
Delinea’s Cybersecurity organization is seeking a highly skilled Manager of Vulnerability Management to provide leadership and execution for an industry-leading Vulnerability Management program. The role involves overseeing and maturing the Vulnerability Management function.
Responsibilities
Design and execute Vulnerability Management target operating model (people, process, and technology)
Set the tone for the Vulnerability Management team culture
Partner closely with peers in Product Security and Development to integrate security while ensuring developer enablement
Direct the analysis, evaluation, and enhancement of the effectiveness of Vulnerability Management
As a Cloud Security Engineer, you will be part of the Governance & Architecture team within the Cloud & DevOps Services department. You are pivotal in enabling and enhancing our security posture, allowing streamlined and secure cloud development and deployment processes.
Responsibilities
Contribute to and enhance a complete stack of solutions for cloud security & DevSecOps management from a people, process, and technology perspective.
Manage CSPM, CWP, SAST, secret detection, policy as code, and Infrastructure as Code modules review.
Provide practical guidance to engineering and project teams to support the implementation of security controls, guidelines, and best practices.
Enable cooperation between product teams, cybersecurity teams, and compliance functions.
Quantify risk and define relevant control objectives and activities to secure cloud workloads.
Domain analyst covering Application Security, Data Security and Cloud Security, owning the Design Assurance register.
Responsibilities
Perform pre-production reviews for application security tooling including SAST, DAST and SCA, validating against AppSec architecture standards, SDLC integration patterns and API security controls.
Review data security tooling including DLP and data classification against data security architecture standards.
Review cloud security tooling and landing-zone configurations against the cloud security standards — CSPM policy baselines, CIEM entitlement boundaries, key management and network isolation across the Azure and GCP estates — and record where a deviation is an accepted exception rather than a gap.
Keep review records current in the assurance register, to the evidence standard audit will test.
Run pre-production and business-as-usual reviews across Application Security, Data Security and Cloud Security, escalating cross-domain and precedent-setting designs to senior review.
Requirements
Bachelor's degree in a relevant discipline, or equivalent professional experience.
Nice to have: SDLC integration and API security controls
Nice to have: Encryption management and data access governance
Nice to have: Multi-cloud security control consistency
Lead the design and implementation of cloud security architecture and strategy for Deloitte’s US Infrastructure and global teams.
Compensation
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 to $243,700.
Responsibilities
Define and drive cloud security strategy and roadmaps
Partner with US Infrastructure and Deloitte Global on cyber strategy
Architect and design secure cloud platform solutions
Lead cloud security architecture on projects across CSPs
Implement shift-left security controls in CI/CD pipelines
Requirements
Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
Nice to have: hands‑on experience with major public cloud platform
Nice to have: experience designing large‑scale secure solutions
Nice to have: knowledge of Palo Alto Networks Prisma Cloud and Cortex
Nice to have: cloud security certifications (AWS, GCP, Azure, CCSP)
Engineering Manager, SecurityNewReplit · Foster City, US
Manager, Vulnerability ManagementNewDelinea · Remote, US
Cybersecurity Architecture Manager - Cloud SecurityDeloitte · Birmingham, US