Senior Consultant | Purple Teaming

Deloitte Services Pty Ltd; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Mentoring and leadership programs

Professional development reimburse

Subsidised qualifications

Job summary

Deloitte Australia’s Enterprise Security team is seeking an experienced security professional to operate across offensive and defensive domains. You’ll blend penetration testing with threat emulation and defensive tooling, testing client attack surfaces, cloud environments, and detections while guiding remediation with clients.

This hands-on role involves scoping, delivery, reporting, and client workshops across security domains and industries, with mentoring and leadership opportunities in a

Qualifications

• 3+ years of experience in Offensive Security, Purple Teaming, Detection Engineering, or related cyber roles.
• Practical understanding of offensive and defensive security controls and testing.
• Strong knowledge across security platforms (PIM, SIEM, EDR), OS, networks, and attack techniques.
• Experience delivering Offensive Security engagements across infrastructure, web apps, APIs, cloud, or IoT.
• OSCP certification is desirable; other cyber defense certs are valued.
• Experience with known C2 frameworks and bypass concepts and translating to detections uplift.
• Experience validating logging, alerting, SIEM use cases.
• Experience leading engagements with limited supervision.
• Strong ability to explain findings to technical and non-technical audiences at C-suite/Director level.

Responsibilities

• Test external attack surfaces, web apps, or cloud environments.
• Validate detections, tune alerts, and assess control effectiveness.
• Run Purple Team exercises aligned to real-world threats.
• Deliver findings, remediation guidance, and client workshops.

Skills

Offensive Security

Purple Teaming

Detection Engineering

Security Operations (L1-L3)

Incident Response

Strong stakeholder comms

Education

OSCP Certification

Cyber Defense Certifications

Tools

PIM

SIEM

EDR

Job description

• Be part of market-leading projects with global scale and complexity
• Mentoring, coaching and leadership programs to help you make an impact that matters
• Reimbursements for professional development and subsidised qualifications

What will your typical day look like?

As part of Deloitte’s Enterprise Security team, you’ll work across both offensive and defensive security to help clients understand how their att ack surface ca n be breac hed and how they can better defend themselves.

This is a hands-on role that blends penetration testing, Continuous Threat a nd Exposure Management , adversary emulation and practical appl icatio ns of defensive capabilities such as a ba se line und erstandi ng of d efensiv e cap ab ilities such as dete ction enginee ring . One day you might be testing a client’s e xternal attack surface, web applications or cloud environment. The next, you could be working with their security team to validate detections, tune alerts, assess control effectiveness, or run a Purple Team exercise mapped to real - world persi stent thr eats .

You’ll help clients identify vulnerabilities, test security controls, improve monitoring and response, and turn technical findings into practical actions. You’ll be involved in the full lifecycle of engagements, from scoping and delivery through to reporting, client workshops and remediation guidance.

About the team

Cyber threats keep evolving, and so do the organisations defending against them. That’s why our work is more meaningful and more exciting than ever. We help clients identify vulner abilitie s , strengthen cybe r resilience, and improve the i r det ect ion and respo nse c apabilit ies across the enterp rise .

Our team works across offensive security, re d & purple teaming, vulnerability management, dete ction uplif t and broader security operati ons trans format ion s . It means you’ll get exposure to a wide range of t echnica l challenges, clients and industries while continuing to build depth in the areas that interest you most.

Enough about us, let’s talk about you.

You are someone with:

• 3+ years of experience in Offe n sive S e cur ity , Purple Teaming, D etection E ngineering, S ecu rit y Oper ations ( L 1 ,L2 , L3) , I ncident R esponse, or closely related cyber security roles
• Practical understanding of both offensive techniques and defensive security controls, including how to test and improve detection and response outcomes
• Strong knowledge across a variety of sec urity platforms ( i.e . , PIM , SIE M , EDR) operating systems, networked enviro nments, and att ack techniques
• Experience delivering Offensive Se curity engagements across at least 2 of the following domains : infrastructure, web applications, APIs, mobile, cloud, wireless, thick client, or IoT
• Certification in OSCP. C yber D efens e certifications or pla tfor m specific certi fied experience are also highly regarded
• Experience with known C2 frameworks and advanced offensive concepts such as AV and EDR bypass techniques, with the ability to translate these into de tectio n u p lifts
• Experience validating and improving logging, alerting, detection rules or SIEM , ED R use cases
• Experience leading engagements and working independently wit h limi ted super vision
• Strong stakeholder communication skills and the ability to explain technical findings to both technical and non-technical audiences at C -suit e /D irect or level .

Why Deloitte?

At Deloitte, we focus our energy on interesting and impactful work. We’re always learning, innovating and setting the standard; making a positive difference to our clients and our society. We put coaching at the heart of what we do, helping our people grow their careers in any direction – whether it be up, moving into something new, or even moving across the world.

We embrace diversity, equity and inclusion. We have a diverse collection of people from different backgrounds, with different experiences, gender identities, abilities and thinking styles. What binds us together is a shared commitment to value everyone’s perspective and to cultivate inclusion; so that our work environment is a safe space we can all belong.

We value in-person connection with our clients and our colleagues. We offer several ways for you to work flexibly so that you can serve your clients, stay connected with your team, and manage your personal priorities.

We help you live and work well. To support your personal and professional life, we offer a range of perks and benefits , including retail discounts, wellbeing leave, paid volunteering days, twelve flexible working options, market-leading parental leave and return to work support package.

#LI-Hybrid

By applying for this job, you’ll be assessed against the Deloitte Talent Standards. We’ve designed these standards so that you can grow in your career, and we can provide our clients with a consistent and exceptional Deloitte employee experience globally. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.