Delivery Senior Consultant, Penetration Tester

The Delivery Senior Consultant, Penetration Tester collaborates with client and Deloitte teams to conduct thorough testing of web applications, APIs, and supporting infrastructure, delivering remediation guidance and risk-based findings.

Responsibilities

• Perform manual and automated penetration testing of web applications, APIs, and supporting infrastructure.
• Identify, validate, and document security vulnerabilities, including those represented in the OWASP Top 10.
• Execute authenticated and unauthenticated assessments across development, test, and production-like environments.
• Assess application security controls such as authentication, authorization, session management, input validation, and encryption.
• Prepare clear, risk-based reports featuring technical findings, business impact, proof of concept, and remediation recommendations.
• Collaborate with developers, architects, and security teams to explain findings and support remediation efforts.
• Retest remediated issues and confirm closure.
• Contribute to security standards, testing methodologies, and internal knowledge sharing.
• Stay current on emerging threats, exploit techniques, and application security trends.

Qualifications

Minimum experience: 2 years

Education: Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical field

Location

Philadelphia, PA (hybrid)

Technologies

• Burp Suite
• OWASP ZAP
• Nmap
• Postman
• AWS
• Azure
• GCP
• JavaScript

The Team

Deloitte's Government & Public Services (GPS) practice focuses on delivering impact to federal, state, and local government clients, as well as public higher education institutions. The team brings fresh perspectives to help clients anticipate disruption and fulfill their mission.

The Cyber Defense & Resilience offering assists clients in defending against advanced threats by transforming security operations, monitoring, data analytics, and threat intelligence. It supports management of dynamic attack surfaces and provides rapid crisis and cyber incident response to ensure readiness, response, and recovery from disruptions.

This opportunity sits within Deloitte US Delivery Center, a model designed to deliver high-quality services with standardized processes and procedures, leveraging scale and talent. The center combines a small-business feel with large-scale impact, offering career opportunities across delivery locations with nominal travel requirements.