Zero Trust Security Engineer

Deloitte France; Indianapolis (IN); On-site; USD 110,000 - 170,000; Full time

Job summary

Deloitte Global is seeking an Application Security Engineer to strengthen our security posture for global customers. You will deploy and manage WAFs, configure Zero Trust Proxy, and work with SOC on incidents.

Responsibilities include detection rule development, CDN integration, vulnerability assessment, and cross-team collaboration to ensure robust security controls across cloud environments.

Qualifications

• Bachelor's degree in information security, IT, CS, engineering, or equivalent.
• 4+ years in network security and 2+ years in application security.

Responsibilities

• Deploy, configure and maintain web application firewall systems for protection of web apps.
• Deploy, configure and maintain Zero Trust Proxy systems and connectors.
• Monitor security events, alerts and logs from WAF; investigate incidents with SOC teams.
• Develop and maintain detection rules, alerts and reports from log data.
• Collaborate with infrastructure and app teams to integrate WAF with CDNs (Akamai, Radware).
• Identify vulnerabilities from WAF data and propose remediation.
• Document WAF configurations, policies, and procedures; prepare security reports and metrics.
• Explain security concepts to non-security teams and provide guidance on best practices.

Skills

Web security concepts

OWASP Top 10

OAuth/OIDC

WAF

Zero Trust

APIs security

Cloud security

HTTP logs

CI/CD pipelines

Education

Bachelor's Degree in Information Security / IT / CS

Tools

Akamai

Terraform

ServiceNow

Job description

Deloitte Global is seeking an Application Security Engineer to strengthen our security posture for global customers. You will deploy and manage WAFs, configure Zero Trust Proxy, and work with SOC on incidents.

Responsibilities include detection rule development, CDN integration, vulnerability assessment, and cross-team collaboration to ensure robust security controls across cloud environments.