Senior Cloud Security & Penetration Testing Consultant

Deloitte Southeast Asia; Singapore; Vor Ort; SGD 120.000 - 180.000; Vollzeit

Zusammenfassung

Deloitte Southeast Asia is seeking a Cyber Defense and Resilience Consultant to help SEA clients assess and remediate cloud security vulnerabilities across hyperscalers. You will perform cloud security assessments and security testing, focusing on cloud-native architectures, identity protection, and multi-cloud environments.

The role combines hands-on testing with advisory work and requires strong experience in AWS/Azure/GCP, plus collaboration with cloud engineering teams to implement

Qualifikationen

• 5–6+ years of cybersecurity experience with hands‑on cloud security assessments and cloud penetration testing.
• Depth in cloud exploitation; able to chain misconfigurations into working attack paths.
• Experience with identity attack paths across hybrid and cloud environments, including AD/Entra ID and federation weaknesses.

Aufgaben

• Conduct cloud security assessments across AWS, Azure and Google Cloud Platform against security baselines and benchmarks.
• Perform cloud-focused security testing of cloud infrastructure, cloud-native apps, APIs, and containerized workloads.
• Simulate cyber attacks to identify configuration weaknesses and exploitable vulnerabilities.
• Review IAM configurations, network security groups, encryption settings, and data protection controls.
• Assess CSPM and workload protection controls against client risk and compliance requirements.
• Develop testing methodologies for cloud-native architectures, serverless services, and multi‑cloud environments.
• Prepare detailed reports with risk ratings and remediation recommendations specific to cloud environments.
• Recommend and support improvements to cloud security posture, guardrails, and policies.
• Collaborate with client cloud engineering and DevOps teams to validate findings and support remediation.
• Stay updated with the latest cloud security tools and hyperscaler updates.
• Support business development with proposals and client presentations.

Kenntnisse

Cloud security

Penetration testing

IAM & Access

CSPM

Hyperscaler knowledge

Security tooling

Team collaboration

Problem solving

Tools

AWS

Azure

GCP

Jobbeschreibung

Deloitte Southeast Asia is seeking a Cyber Defense and Resilience Consultant to help SEA clients assess and remediate cloud security vulnerabilities across hyperscalers. You will perform cloud security assessments and security testing, focusing on cloud-native architectures, identity protection, and multi-cloud environments.

The role combines hands-on testing with advisory work and requires strong experience in AWS/Azure/GCP, plus collaboration with cloud engineering teams to implement