Deloitte

AppSec and Vulnerability Management Engineer

Deloitte  •  Sydney, AU (Hybrid)  •  2 hours ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

Job Requisition ID: 41843

  • Take the next step in accelerating your career at Deloitte
  • Whether you're looking for a new role in your current Business Unit, a different BU or a move interstate, Pathways — our internal mobility program — can provide the framework to support you
  • This is an opportunity to use and further develop your automation and vulnerability management skills

What will your typical day look like?

Working across vulnerability management and application security, you'll guide initiatives that improve how risks are identified, prioritised and addressed across servers, workstations and applications. That could mean designing automation that removes manual effort, improving remediation workflows, or helping teams make better decisions through clearer reporting and triage.

A big part of the role is finding practical ways to apply AI in security operations. From exploring LLM and agent-based use cases to improving prioritisation, orchestration and decision support, you'll help turn emerging capability into meaningful operational uplift for security teams and platform owners.

Success in this role comes through coordination as much as technical capability. You'll work closely with security teams, platform owners and business stakeholders to keep initiatives moving, lift service maturity, and strengthen governance, metrics and continuous improvement across the function.

About the team

ITS Security helps protect Deloitte's internal technology environment so our people can do their best work with confidence. The team works across cyber operations, vulnerability management, application security and risk reduction, focusing on practical, scalable controls that strengthen resilience across the enterprise. It's a space where technical depth, good judgment and strong stakeholder collaboration come together to solve real security challenges.

Enough about us, let's talk about you

You may have all or some of the following skills/experiences:

  • Strong scripting and automation capability, including hands-on experience with Python and PowerShell
  • Experience improving security operations, vulnerability management, or application security processes
  • Knowledge of AI concepts, including LLMs, AI agents, and their practical use in operational environments
  • Familiarity with tools such as Qualys, Nessus, Checkmarx and Prisma
  • Understanding of development tools including version control systems (GitHub) and CI/CD pipelines (GitHub Action workflows).
  • Confidence working with stakeholders across security, platform and business teams to influence outcomes
  • Strong communication skills and the ability to guide initiatives, coordinate delivery, and drive continuous improvement
  • Experience with risk-based prioritisation, remediation workflows, reporting, or service governance would be highly regarded

Why consider internal opportunities?

  • To apply for an internal opportunity, you need to have worked with us on a permanent or fixed term basis for a minimum of one year
  • Ensure you have a conversation with your Career Coach before applying to any internal opportunities
  • You will also need a minimum rating of "On Track" in your most recent Year Ahead conversation

Recruitment Process

If shortlisted, a member of the Talent Acquisition team will be in touch to conduct an initial phone screening. Following this, you may be progressed through behavioural-based interviews which may include a case study.

Next Steps

Sound like the sort of role for you? Apply now!

#LI-Hybrid

#Linkedin

By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.

Deloitte

About Deloitte

Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.

The content on this page contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively the “Deloitte Network”) is, by means of this publication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on content from this page.

Industry
Consulting & Advisory
Company Size
10,000+ employees
Headquarters
Worldwide, OO
Year Founded
1845
Social Media