T&T Senior Consultant - Cloud Security & Penetration Testing - MY DRSC

Deloitte Regional Services Center Sdn. Bhd.

AI-generated summary

Pen-test AWS/Azure/GCP: assess configs, IAM, APIs; simulate attacks and report risks.
Work in a regional services center securing cloud-native, multi-cloud clients.
Lead tests, drive remediation with cloud teams, and present findings to clients!

Undisclosed

Kuala Lumpur, MY, Kuala Lumpur

Full-Time

Job Description

Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).

Perform cloud-focused security testing, including vulnerability assessments and penetration testing of cloud infrastructure, cloud-native applications, APIs, and containerized workloads.

Simulate cyber attacks against cloud environments to identify configuration weaknesses, privilege escalation paths, and exploitable vulnerabilities.

Review cloud identity and access management (IAM) configurations, network security groups, encryption settings, and data protection controls.

Assess cloud security posture management (CSPM) and workload protection controls, identifying gaps against client risk appetite and compliance requirements.

Develop and execute testing methodologies tailored to cloud-native architectures, serverless services, and multi-cloud environments.

Prepare detailed reports on assessment and testing findings, including risk ratings and remediation recommendations specific to cloud environments.

Recommend and support implementation of improvements to cloud security posture, guardrails, and policies.

Collaborate with client cloud engineering and DevOps teams to validate findings and support remediation efforts.

Stay updated with the latest cloud security tools, testing techniques, and hyperscaler service and security feature updates.

Support business development activities including proposals and client presentations alongside senior team members.

Job Requirements

Company Benefits

Comprehensive Insurance Coverage

Employees are provided with labor and health insurance, along with group insurance plans, ensuring robust health and financial protection.

Professional Development Support

The firm offers incentives for obtaining professional certifications, subsidies for association membership fees

Flexible Working Arrangements

Recognizing diverse needs, Deloitte provides flexible working hours and leave systems, including anticipated and deferred annual leave.

Employee Well-being Programs

Initiatives such as physical health checks, Employee Assistance Programs, and subsidies for group activities and sports clubs.

Additional Info

Company Activity

Last active - few hours ago

Experience Level

0 - 10 Years of Experience

Job Specialisation

Cybersecurity / Network Security

Hardware / Network / Infrastructure (On-Premises / Cloud)

IT Project Management

Company Profile

Deloitte Regional Services Center Sdn. Bhd.

Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax & legal, and related services. With more than 175 years of hard work and commitment to making a real difference, our organisation has grown in scale and diversity—approximately 415,000 people in 150 countries and territories, providing these services—yet our shared culture remains the same. Our...