Senior Consultant Manager Cyber Operate Application Security Specialist
Role Overview
About Deloitte
Deloitte is one of the largest professional services firms globally, recognized for its impact on clients, people, and society. The firm has received multiple awards, including Best Employer in the Middle East and Best Consulting Firm. Deloitte operates with shared values to deliver innovative insights and solve complex challenges for clients, while fostering an inclusive culture for its professionals.
The Role: Senior Consultant Manager, Cyber Operate Application Security Specialist
Deloitte is seeking a Senior Consultant Manager, Cyber Operate Application Security Specialist to join its team in Riyadh. This full-time role involves developing and demonstrating capabilities in application security, focusing on secure development standards, embedding security in CI/CD pipelines, conducting in-depth application assessments, and driving vulnerability remediation. The position requires 5-10 years of relevant experience.
Full Job Posting
Job description
About Deloitte
Deloitte is one of the largest professional services firms globally, recognized for its impact on clients, people, and society. The firm has received multiple awards, including Best Employer in the Middle East and Best Consulting Firm. Deloitte operates with shared values to deliver innovative insights and solve complex challenges for clients, while fostering an inclusive culture for its professionals.
The Role: Senior Consultant Manager, Cyber Operate Application Security Specialist
Deloitte is seeking a Senior Consultant Manager, Cyber Operate Application Security Specialist to join its team in Riyadh. This full-time role involves developing and demonstrating capabilities in application security, focusing on secure development standards, embedding security in CI/CD pipelines, conducting in-depth application assessments, and driving vulnerability remediation. The position requires 5-10 years of relevant experience.
Key Responsibilities
- Define secure SDLC, secure coding standards, and application security requirements, aligning with NCA ECC, OWASP ASVS, and NIST SSDF.
- Establish security requirements and acceptance criteria for in-house and vendor-built applications, including contract clauses and release checks.
- Build and maintain an application inventory with risk ratings for each application.
- Implement and tune SAST, DAST, SCA, and secrets scanning in CI/CD pipelines using tools such as Checkmarx, Fortify, Veracode, SonarQube, Snyk, and Burp Suite.
- Triage tool findings, remove noise, and provide clear, actionable guidance to developers to maintain release velocity.
- Review container, infrastructure-as-code, and cloud-native deployments with DevOps teams.
- Conduct application security assessments of web, mobile, and API applications, including manual testing of authentication, authorization, and business logic.
- Perform secure code reviews for high-risk features and components.
- Lead threat modeling for new applications and major changes, collaborating with architects and development teams.
- Review third-party and SaaS applications prior to adoption.
- Track application vulnerabilities to closure with development teams and vendors, verifying fixes before release.
- Report application risk posture and trends to management.
- Train developers on secure coding, OWASP Top 10, and API Security Top 10, and establish a network of security champions within development teams.
- Leadership Capabilities
- Understand Deloitte's purpose and values, exploring opportunities for impact.
- Demonstrate commitment to personal learning and development, acting as a brand ambassador.
- Understand expectations and maintain personal accountability for performance.
- Actively develop effective communication and relationship-building skills.
- Understand how daily work contributes to team and business priorities.
- Experience and Work Type
- This role requires 5-10 years of experience in a relevant field. It is a full-time position based in Riyadh.
Application Process
- Candidates interested in this role are encouraged to apply. Salary details will be discussed during the interview process.
About Deloitte
Deloitte is the largest professional services network in the world, with over 470,000 dedicated people in independent firms globally who come together to provide a broad range of leading professional services to clients. Their purpose is to make an impact that matters by helping organizations solve problems and build better futures. They provide audit, consulting, financial advisory, risk, tax, and legal services.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Deloitte
Associate Director, Insurance Lead AI & Data Architect, Engineering, AI & Data, Technology & Transformation
London, GBR
Deloitte is seeking an Associate Director to lead insurance-focused AI and data architecture and transformation programmes. Candidates need significant architecture experience in insurance, strong client-facing skills, a
Manager, Life & Pensions Business Data Analyst, Engineering, AI & Data, Technology & Transformation
London, GBR
Deloitte seeks a client-facing Life & Pensions Business Data Analyst to translate complex business and data needs into scalable solutions. The role covers stakeholder engagement, requirements, process design, SQL-based d
Senior Business Analyst, IT Business Services
Belfast, GBR
Deloitte is seeking a Senior Business Analyst to lead analysis on complex initiatives and help technology teams deliver solutions that meet business needs. The role includes stakeholder engagement, process improvement, r
Oracle Cloud ERP Finance Acquire-to-Retire (A2R) Senior Consultant
Calgary, CAN
Deloitte is seeking a senior consultant to deliver Oracle Cloud Finance engagements focused on Acquire-to-Retire processes. The role covers solution design and configuration, deployment, integrations, migration, testing,
Directeur(trice), Chaîne d'approvisionnement et opérations réseau - Opérations intelligentes
Calgary, CAN
Deloitte recherche un directeur ou une directrice pour diriger des missions de transformation de la fabrication et des opérations de la chaîne d’approvisionnement. Le poste comprend la gestion de projets clients, le déve
Security Cleared Government & Public Sector (GPS) - Operations, Industry & Domain Solutions
Manchester, GBR
Deloitte is seeking a graduate Business Transformation Analyst for its Government and Public Sector Operations, Industry and Domain Solutions team. You will support client transformation through process and strategy work
Associate Director, Insurance Lead AI & Data Architect, Engineering, AI & Data, Technology & Transformation
London, GBR
Manager, Life & Pensions Business Data Analyst, Engineering, AI & Data, Technology & Transformation
London, GBR
US Tax Manager, Deloitte Global Finance
Cincinnati, USA
Senior Business Analyst, IT Business Services
Belfast, GBR
T&T Experienced Analyst - SOC Engineer - ID
, USA
Oracle Cloud ERP Finance Acquire-to-Retire (A2R) Senior Consultant
Calgary, CAN
Directeur(trice), Chaîne d'approvisionnement et opérations réseau - Opérations intelligentes
Calgary, CAN
Security Cleared Government & Public Sector (GPS) - Operations, Industry & Domain Solutions
Manchester, GBR