A unique opportunity has opened up for an experienced penetration tester to join Deloitte Enterprise Risk Services group. Initially you will join on a temporary basis with a prospect of permanent employment.

You will be responsible for:

• Developing complete penetration testing service proposition, including marketing, sales, technical capabilities and talent.
• Leading attack and penetration testing engagements to identify security weaknesses within client's IT environments, reporting on issues and making recommendations for their remediation.
• Vulnerability management engagements which include: network and host layer vulnerability assessments, firewall and networking device reviews, web application assessments, source code reviews and targeting the physical security of the infrastructure or buildings.

Deloitte has one of the largest security teams in the world and as a part of this global team you will have an unrivaled exposure to best practices, tools and experience covering virtually all industries and technologies.

The successful candidate should possess:

• Hands-on experience of working with applications that perform a wide range of business functions - ideally across multiple industries.
• Ability to understand and assess applications from both a technical and business function perspective.
• Prior experience of performing web application penetration tests, to identify weaknesses in security controls and the business risks associated with these.
• Strong academics, including a degree from a leading technical university.
• Ability to communicate business and technical risk to all levels of audience.
• CISSP, CISM, CEH or other relevant security qualifications, including vendor certifications.

Subject matter expertise in:

• Networking: LAN, WAN, interworking technologies.
• Security Appliances: Firewalls (Cisco, Check Point), Proxies, IDS/IPS.
• Web development - .NET, Java, PHP.