Berufsbezeichnung:
Penetration Tester, Cyber Risk Services - Risk Advisory, Zurich (80-100%)

Arbeitsbeschreibung:
Deloitte Cyber Risk Services


In a rapidly changing world where information has a significant value, supply chains are interconnected and there is uncertainty when doing business on a global basis, information security and privacy have become board level issues.

With the creation of Deloitte North-West Europe our Cyber team has grown rapidly. We have the largest Cyber capability of the “big 4” in the European marketplace with over 600 Cyber Risk Specialists staffing thousands of client engagements. The team combines a wealth of deep industry knowledge with both business advisory experience and technical expertise. Within this team we provide our clients a full spectrum of security and privacy services, from current state assessments and readiness work to large-scale transformation programmes, fixing security issues and delivering real, long-lasting benefits.


The environment at Deloitte is made up of intellectually curious, smart people; including world class security and privacy experts. Your mix of work will help foster your leadership skills and you’ll develop relationships with a team that you respect and have fun with. In addition, you will have the opportunity to identify areas of work which are of particular interest to you. You can drill deep and become an expert, grow as a generalist or develop a specialism within an industry sector.


What you’ll do

•    Be the service lead of one or multiple application security managed services
•    Point of contact for our clients regarding all service management related aspects
•    Stakeholder management, including presentations to management and reporting
•    Perform quality reviews of penetration testing reports
•    Lead manual infrastructure, web & mobile application and IoT penetration test assignments
•    Support/lead vulnerability management programs to help clients with their Secure Software Development Lifecycle
•    Perform offensive and defensive security (Red and Blue teaming) assessments.
•    Be responsible for performing security configuration reviews
•    Conduct manual and automated security code reviews
•    Perform large security assessments such as Red Teaming
•    Train clients or colleagues in conducting penetration testing
•    Present assessment results to management and explain the steps required for remediation


What you need

•    Comprehensive experience in information security and aligned qualifications in security standards such as ISO 27001 or equivalent
•    Multi-year experience in leading penetration testing managed services
•    Experience in leading penetration testing teams and in training junior penetration testers
•    Experience in reviewing penetration test reports and quality assurance
•    Experienced with malware reverse engineering and code review
•    Exposure to a variety of industries inclusive but not exhaustive to; FSI and HCLS
•    Experience with Red teaming exercises. Experience in Blue/Purple teaming is advantageous
•    At least ten years of experience in penetration testing (including Web, Mobile and Thick client applications and infrastructure), reverse engineering or Red teaming
•    At least one of the following certifications such as OSCP, SANS GWAPT, SANS GPEN, SANS GMOB or SANS GXPN.
•    Strong interpersonal skills as well as the proven ability to develop long-lasting relationships, influence stakeholders, and negotiate agreements are expected.
•    Proven ability to communicate with senior management
•    You will have strong analytical and problem solving skills and the ability to articulate complex concepts in a clear and concise manner.
•    Fluent English, both written and verbal are mandatory; German or French skills are strongly desired. One of these three languages ought to be native level.


About Deloitte

Deloitte is one of the world’s leading professional services firms in the areas of Audit and Risk Advisory, Tax, Consulting and Financial Advisory. In Switzerland, we have offices in Zurich, Bern, Basel, Geneva, Lausanne and Lugano.

Our approach combines insights and innovation from multiple disciplines with global business and industry expertise to help our clients excel anywhere in the world. As trusted advisors to some of Switzerland’s largest organizations, we delivery outstanding impact on the reputation and success of clients in Switzerland and globally. In pursuing this we contribute to a sustainable and prosperous society, and are firm believers in the positive impact business can and should have on the world it operates in.

We also foster a collaborative culture where talented individuals can produce their best work in an agile and dynamic environment. We value difference, with respect at the heart of our inclusive culture.  We are open to discussing with candidates the different ways in which we are able to support agile ways of working.  We recognise that our people are juggling demanding careers with commitments and interests outside of work. Click here to see what some of our working parents have to say.


Any questions? Get in touch.


We look forward to hearing from you! Please submit a complete application, including CV, cover letter, references and degree certificates, using our online career portal www.deloitte.com/careers.

If you have any question, please contact Annabel Gross at talent (at) deloitte.ch.


Deloitte AG and Deloitte Consulting AG are Swiss subsidiaries of Deloitte LLP, the DTTL member firm in the United Kingdom.

Requisition code: 154121

Wie Sie sich bewerben:
https://jobs2.deloitte.com/ch/en/job/DELOA003XSwitzerland154121en-CH/Penetration-Tester-Cyber-Risk-Services-Risk-Advisory-Zurich-80-100

Angestelltenname: Deloitte AG