N/A
Same job available in 8 locations
Cincinnati, Ohio, United States
Hermitage, Tennessee, United States
Indianapolis, Indiana, United States
Kansas City, Missouri, United States
Nashville, Tennessee, United States
San Antonio, Texas, United States
St. Louis, Missouri, United States
Tampa, Florida, United States
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
Work you'll doThis role is responsible for providing penetration testing services through a combination of technology and manual ingenuity as part of the Global cyber services organization for member firms. Responsibilities of this role include: Executing Penetration testing engagements: Web Application Penetration Testing Web Services / Application Programming Interface (API) Penetration Testing AI/LLM Penetration testing Network Penetration Testing Mobile Application Penetration Testing Thick Client Penetration Testing Providing consultative guidance to customers on findings identified in a clear and actionable fashion, both in writing and verbally Enhancing and updating testing methodologies, processes, and standards documentation Leveraging AI and LLM-based tools and prompt engineering, using both established platforms and emerging frameworks, to accelerate reconnaissance and generate or refine testing scripts Building, customizing, and maintaining AI-driven agents to automate recurring testing tasks Continuously validating the accuracy and reliability of self-developed AI tools, actively working to reduce hallucinations and false positives in vulnerability identification Evaluating and integrating emerging AI-assisted offensive security tooling into team methodology and playbooks Proficient at analyzing and understanding complex architecture designs. Ability to effectively communicate the services and capabilities our group can facilitate to our clients. Professionals currently in a Deloitte Global role may be considered for this position, regardless of their US location.
The teamDeloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
QualificationsRequired: Experienced with Kali Linux or other dedicated Penetration Testing OS Platform. With knowledge of common testing tools like Burp Professional, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQL Map, and others Familiarity with OWASP Top 10 software security weaknesses and vulnerabilities Familiarity with various AI models and frameworks from providers such as Anthropic and OpenAI, and experience configuring tools like Obsidian and Ollama is a plus for supporting other workflows. Working knowledge of one scripting language and familiarity with at least one software programming language and framework Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis Ability to manage concurrent initiatives and use effective judgment in prioritization and time management Strong written and verbal communication skills Must be a US Citizen Preferred: Certified Ethical Hacker (CEH) Certification Offensive Certified Security Professional (OSCP) Certification Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN) OWASP Application Security Top 10 OWASP API Security Top 10 OWASP Thick Client Top 10 OWASP LLM Top 10 MITRE ATT&CK Framework Cloud Service testing Reverse Engineering Static Application Software Testing (SAST) Dynamic Application Testing (DAST) Experience of Agentic development and its application to support penetration testing
Limited immigration sponsorship may be available.
Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at USTalentCICInbox@deloitte.com.
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
Requisition code: 368417
Job ID 368417
Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.
The content on this page contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively the “Deloitte Network”) is, by means of this publication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte Network shall be responsible for any loss whatsoever sustained by any person who relies on content from this page.
