Senior Consultant Cyber Engineering – BISO (Government and Public Services)

About the role

Deloitte Technology US is recruiting a Senior Consultant Cyber Engineering (BISO) for its Government and Public Services (GPS) Business Information Security Officer function. The consultant works with technical and non-technical stakeholders to assess risks, recommend mitigations and help maintain the security posture of systems and applications that support business operations and client delivery. The role also contributes to security reviews of solution architectures, especially cloud-based ones, and to defining security requirements, designs and compliance controls. Recruiting ends on 11/20/2026.

Key responsibilities

• Review detailed application security architecture for GPS solutions
• Integrate security requirements into DevOps processes and ensure Secure Development Lifecycle (SDLC) compliance
• Serve as a trusted advisor to solution architects, developers and technical risk analysts on security principles, standards and best practices
• Help socialize and adopt enterprise security and compliance requirements, and create and validate application security requirements
• Maintain awareness of application security threats and AI tools, and counsel stakeholders accordingly
• Oversee the design and implementation of application security controls to meet compliance requirements

Required profile

• Bachelor's degree or equivalent in Computer Science, Engineering, Information Security, Information Systems or Information Technology
• Minimum 8 years of technology experience, including minimum 6 years in cybersecurity, technology risk management, risk assessment or client service (with cloud and security training or certification)
• US Government security clearance must be obtainable
• Preferred: advanced generalist experience in policy and standards, risk management and reporting, and change management; GCP or Azure, AI/ML, API security, or Master's degree
• Preferred: experience supporting SDLC, cyber reviews and security assessments, reviewing cloud architecture drawings, and familiarity with ISO, NIST 800-53, 800-171 and 800-218

Required skills

• Ability to work independently and lead projects or workstreams
• Clear written and verbal communication, able to explain security and risk concepts to technical and non-technical audiences
• Attention to detail, deadline management and ability to prioritize in a fast-paced environment