[Hiring] Consultant Cyber Engineering - Data Protection @Deloitte

Role Description

Are you passionate about technology and interested in joining a community of collaborative colleagues who respectfully and courageously seek to challenge the status quo? If so, read on to learn more about an exciting opportunity with Deloitte Technology US (DT - US). We are curious and life-long learners focused on technology and innovation.

US Cyber Data Protection team is responsible for securing and protecting confidential data of Deloitte US Member Firm, our Clients, and our Employees. Team’s core mission is to implement consistent security controls to protect Firm’s data and data entrusted to us by our Clients to build their trust and protect our brand.

We are seeking an experienced and energetic US Cybersecurity Data Consultant with outstanding communication, analytical and cyber security technical skills to join our Cyber Data Protection team within Deloitte Technology US (DT - US) Organization.

If you’re an experienced, hands-on IT professional with strong systems administration, engineering, IT technical support and/or cyber security technical skills who’s interested in growing in the cybersecurity field, this may be the job for you.

As part of our Cyber Data Protection team, you will:

• Assist with the development, deployment, and support of cyber data protection solutions.
• Assist with the implementation of data security controls and design principles.
• Provide Tier 2 technical support to Deloitte end users for several of the cyber data protection services supported by the team that includes but not limited to:
  • Data Loss Prevention
  • Data Minimization
  • Data Classification and Rights Management
  • CASB
  • Web Security
  • Web Application Firewall
  • Zero Trust Network Access
  • Next Generation Anti-virus and Endpoint Detection and Response technology
  • Endpoint Admin Rights Management/Privilege Management technology
  • PKI Certificate Lifecycle Management
  • Encryption Key Management
  • Digital Code Signing
  • Removable Media Protection
  • Data Discovery Roll Off Scans
• Assist in maturing existing data protection solutions protecting against data exfiltration.
• Assist in rolling out new data protection services for employees, getting them adopted and providing on-going support for those services.
• Assist with technology and software reviews based on data protection and endpoint risks.
• Provide technical engineering and troubleshooting support to employees for data protection services.

Qualifications

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
• Minimum 5 total years of various technology related experience
• Minimum 2 years of experience in Information Security/Cybersecurity domain
• Ability to travel 10%, on average, based on the work you do and the clients and industries/sectors you serve
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Requirements

• Knowledge and/or proven record of successfully managing technology implementation projects and providing on-going support for at least two (2) of the following Cyber Security capabilities:
  • Data Loss Prevention (Netskope DLP)
  • Web Application Firewall (Imperva WAF, Radware WAF, Akamai WAF, Cloudware WAF)
  • Zero Trust Network Access (Akamai, Palo Alto)
  • Prisma Access Browser
  • Privileged Access Management (Beyondtrust, Cyberark, Delinea etc.)
  • Cloud Access Security Broker (McAfee Skyhigh, Netskope CASB, Zscaler etc.)
  • Web Security (Netskope SWG, ZScaler, Forcepoint Proxy, Broadcom WSS etc.)
  • Data Retention and Destruction (Symantec Network Discovery, Office365 Security Compliance Center, Avepoint, Varonis etc.)
  • Next Generation Antivirus and Endpoint Detection and Remediation Technology (Crowdstrike Falcon, Cylance ATP, Microsoft Defender etc.)
  • Data Classification and Rights Management (Microsoft AIP, Boldon James, Titus etc.)
  • Key & Certificate Lifecycle Management (Venafi CMS, Vormetric KMS etc.)
  • Public Key Infrastructure (Digicert, GeoTrust, Verisign etc.)
  • Data Encryption and Code Signing
• Experienced with implementing and managing data protection strategies across data at rest, data in motion, and data in use.
• Experience with troubleshooting issues and assisting end users to mitigate technical challenges.
• Familiarity with change management and deployment processes in large IT organizations
• Working knowledge with common IT technologies such as Windows Server, Linux/Unix, Databases, Active Directory/LDAP, virtualization, end-user devices etc.
• Working knowledge of IT / security principles such as encryption, identity, cloud, etc.
• Experience with PowerShell command-line scripting is a plus.
• Professional security certification is desirable, such as Security+ or CISSP
• Understanding of industry best practices related to risk assessment, mitigation, and incident response.
• Knowledge of data protection regulations and standards (e.g., ISO 27001, ISO 27018, NIST 800-171)
• Understanding of networking and core networking protocols (e.g., TCP/IP, UDP, DNS, SMTP, HTTP, and distributed networks)
• Knowledge in different types of VPN, Encryption Standards, Certificates
• Understanding of security controls in public cloud environments (i.e., Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform) and SaaS services hardening.
• Ability to write technical reports and communicate technical content to business users.

Benefits

• At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits.
• Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively.
• We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship.