Penetration Tester
Key Skills for This Role
Full Job Posting
Penetration Tester
Requisition ID: 5828
Country: United States
US Locations: Nashville, Hermitage, Tampa, Cincinnati, Indianapolis, Kansas City, San Antonio, St. Louis
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
Work you'll do
This role is responsible for providing penetration testing services through a combination of technology and manual ingenuity as part of the Global cyber services organization for member firms.
Responsibilities of this role include:
Executing Penetration testing engagements:
Web Application Penetration Testing
Web Services / Application Programming Interface (API) Penetration Testing
AI/LLM Penetration testing
Network Penetration Testing
Mobile Application Penetration Testing
Thick Client Penetration Testing
Providing consultative guidance to customers on findings identified in a clear and actionable fashion, both in writing and verbally
Enhancing and updating testing methodologies, processes, and standards documentation
Leveraging AI and LLM-based tools and prompt engineering, using both established platforms and emerging frameworks, to accelerate reconnaissance and generate or refine testing scripts
Building, customizing, and maintaining AI-driven agents to automate recurring testing tasks
Continuously validating the accuracy and reliability of self-developed AI tools, actively working to reduce hallucinations and false positives in vulnerability identification
Evaluating and integrating emerging AI-assisted offensive security tooling into team methodology and playbooks
Proficient at analyzing and understanding complex architecture designs.
Ability to effectively communicate the services and capabilities our group can facilitate to our clients.
Professionals currently in a Deloitte Global role may be considered for this position, regardless of their US location.
The team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Qualifications
- Required:
- Experienced with Kali Linux or other dedicated Penetration Testing OS Platform. With knowledge of common testing tools like Burp Professional, AMASS, Metasploit, Postman, Swagger, NMAP, Qualys, SQL Map, and others
- Familiarity with OWASP Top 10 software security weaknesses and vulnerabilities
- Familiarity with various AI models and frameworks from providers such as Anthropic and OpenAI, and experience configuring tools like Obsidian and Ollama is a plus for supporting other workflows.
- Working knowledge of one scripting language and familiarity with at least one software programming language and framework
- Demonstrated experience working with diverse stakeholders, preferably on a global multi-national basis
- Ability to manage concurrent initiatives and use effective judgment in prioritization and time management
- Strong written and verbal communication skills
- Must be a US Citizen
- Preferred:
- Certified Ethical Hacker (CEH) Certification
- Offensive Certified Security Professional (OSCP) Certification
- Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN)
- OWASP Application Security Top 10
- OWASP API Security Top 10
- OWASP Thick Client Top 10
- OWASP LLM Top 10
- MITRE ATT&CK Framework
- Cloud Service testing
- Reverse Engineering
- Static Application Software Testing (SAST)
- Dynamic Application Testing (DAST)
- Experience of Agentic development and its application to support penetration testing
- Foundational knowledge of infrastructure and networking concepts, such as servers, containers, and API endpoints, needed to deploy and host AI tools and agents
- Experience developing, customizing, or validating AI agents specifically for offensive security use cases
- Limited immigration sponsorship may be available.
- Our culture
- At Deloitte Global people are valued and respected for who they are – with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
- Professional development
- From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
Benefits
- At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do—that’s why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
About Deloitte
Industry insights and audit, consulting, financial advisory, risk management and tax services from Deloitte's global network of member firms.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Deloitte
Assistant Manager/ Manager | Audit & Assurance | Accounting & Reporting Advisory | Riyadh
Riyadh, KSA
Deloitte seeks an Assistant Manager or Manager for Accounting and Reporting Advisory, delivering technical accounting and financial reporting engagements for clients. Candidates need 5+ years of public accounting or equi
Curam Business Analyst
Ottawa, CAN
Deloitte is seeking a Cúram Business Analyst with experience supporting government IT projects and the Cúram Business Application Suite. You will elicit and document requirements, lead analysis sessions, and contribute t
Specialist Deputy Manager - Brand, Marketing & Communication-Campaign Marketing - Hyderabad/Bengaluru
Hyderabad, IND
Deloitte is seeking a Specialist Deputy Manager to lead integrated marketing campaigns, activations, and performance optimization in collaboration with U.S.-based marketers and business leaders. The role requires 7–10 ye
Curam Business Analyst
Ottawa, CAN
Deloitte is seeking a Cúram business analyst to support client delivery on government IT projects. The work includes eliciting requirements, analyzing systems and gaps, and producing functional documentation in an Agile
Curam Tester
Ottawa, CAN
Deloitte is seeking a tester to validate enterprise applications built on Cúram Social Program Management, including government and social-service workflows. The role requires 3–6 years of QA experience, hands-on Cúram t
Curam Developer
Ottawa, CAN
Deloitte is seeking a Curam Developer to build and integrate Cúram social-services solutions through the software lifecycle. Candidates need at least 3 years of Cúram development experience and 5 years with Java, J2EE, a
Project Manager, Global Talent Operations
, CAN
Deloitte is seeking a Project Manager to deliver global talent technology and operations initiatives from strategy through implementation, adoption, and transition to ongoing operations. The role requires substantial cro
T&T Senior Consultant -SAP CO (Product Costing) - SEA
, USA
Assistant Manager/ Manager | Audit & Assurance | Accounting & Reporting Advisory | Riyadh
Riyadh, KSA
Curam Business Analyst
Ottawa, CAN
Specialist Deputy Manager - Brand, Marketing & Communication-Campaign Marketing - Hyderabad/Bengaluru
Hyderabad, IND
Curam Business Analyst
Ottawa, CAN
Curam Tester
Ottawa, CAN
Curam Developer
Ottawa, CAN
Project Manager, Global Talent Operations
, CAN
