DevSecOps and Cloud Security Tech Lead at Deloitte & Touche (M.E.) – Cairo | Jobyssey

Deloitte innovation hub | Cyber security | DevSecOps & cloud security tech lead, Cairo, Egypt

Connect to your career at Deloitte. Deloitte, established globally in 1845, is the world’s largest and leading professional services firm, providing audit & assurance, tax & legal, consulting, and related services to public and private clients spanning multiple industries. Present in more than 150 countries, Deloitte is distinct in its ability to help clients solve their most complex problems, from strategy to implementation.

Deloitte Innovation Hub (DIH) is a strategic initiative and priority established by Deloitte North & South Europe (NSE) to support our ambition to become the leading business transformation partner of choice for our clients and to expand and scale our delivery footprint across EMEA. With access to a scaled, diverse, highly skilled, motivated, and engaged workforce, DIH is delivering complex technical solutions for clients’ most complex business problems across portfolios that include ‘Strategy & Transactions’, ‘Customer’, ‘Engineering, AI & Data’, ‘Enterprise, Technology & Performance’, and ‘Cyber’.

DIH is aiming to become the destination for top talents in Egypt for a long, exciting career. We invest in outstanding people of diverse talents and backgrounds and empower them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we. Our organization has grown in scale and diversity, providing services across the region, with our shared culture remaining the same. We aim to help clients realize their ambitions, make a positive difference in society, and maximize the success of our people. This drive fuels the commitment and humanity that run deep through our every action.

Role overview

As a DevSecOps & Cloud Security Tech Lead, you can expect to be involved in the following activities:

We are seeking a highly skilled and experienced cloud security engineer with a specialization in one of the four public clouds: Oracle Cloud Infrastructure (OCI), Google Cloud Platform (GCP), Microsoft Azure, and Amazon Web Services (AWS). The ideal candidate will be responsible for ensuring the security of clients’ cloud environments by implementing and maintaining robust security measures and monitoring systems for potential threats. This role requires deep technical expertise in cloud security best practices, strong analytical skills, and the ability to collaborate effectively with cross-functional teams.

Responsibilities

Design, implement, and manage security controls, policies, and procedures for the cloud environment to safeguard against unauthorized access, data breaches, and other security risks.
Conduct regular security assessments and audits of the security environment infrastructure, identifying vulnerabilities and areas for improvement, and recommending solutions to mitigate risks.
Develop and enforce cloud security best practices and policies across the organization.
Collaborate with development and operations teams to ensure secure deployment and operation of cloud applications.
Implement native cloud security controls, such as IAM, VM, EDR, and cloud security posture management to ensure appropriate access to cloud resources.
Stay current with emerging cloud security threats, technologies, and best practices.
Provide security training and guidance to team members and stakeholders on cloud security measures.
Work with regulatory bodies to ensure compliance with industry standards and Middle East regulations related to cloud security.
Manage and configure security tools and software, such as firewalls, intrusion detection systems, and encryption technologies within cloud environments.

Skills and professional experience

To succeed in this role, you will need to match the following criteria:

Bachelor’s degree in computer science, information security, or a related field.
Minimum of 6 years of related experience.
Strong hands-on experience in three of the following five domains:

Cloud and container security

Experience with AWS, Azure, GCP, or OCI and demonstrable affinity with cloud technology.
Experience with containerization technologies such as Kubernetes and Docker. Practical experience with serverless and secure development environments, infrastructure-as-code is a plus.
Knowledge of information security principles and guidelines, including CIS and MITRE ATT&CK frameworks, is an advantage.

Governance and risk assessment

Experience with security frameworks such as ISO, CSA, and PCI.
Experience with the implementation of cloud risk frameworks and optimization of controls in CI/CD pipelines.

Architecture and design

Experience with secure cloud architecture design and implementation; design solutions for improving cloud security by enforcement of cloud security guardrails and standards.
Experience with architecture and security reviews, threat modelling applications, and identifying areas of risk.
Experience with encryption in-flight and at-rest practices, as well as certificate and secrets management.
Knowledge of network architectures, topologies, and concepts such as firewalls, load balancers, WAF, CDN, VPC, ACL, TLS, SSH, and DNS.
Experience with security solutions such as WAF, IPS, and anti-DDoS systems.
Experience with network and perimeter security platforms, routing protocols, and OSI layers.
Experience implementing strategies to support secure and compliant architectures.

DevOps and engineering

Good knowledge of application architecture (microservices, API gateway, service mesh, message queues) and technical expertise in designing controls to secure each layer within the application architecture (web layer, integration layer, backend).
Strong understanding of authentication and authorization patterns and their applicability within the development context, including knowledge of authentication/authorization protocols and patterns within microservices.
Experience with infrastructure automation, infrastructure as code, automated application deployment, monitoring/telemetry, logging, reporting/dashboarding, and continuous delivery technologies.

Application security and DevSecOps

Experience in cybersecurity principles, assessment, and triage for security flaws and common vulnerabilities for web and mobile applications. Ability to understand and assess both threats and vulnerabilities, articulating these to both technical and business stakeholders.
Experience with continuous security practices including threat modelling, threat and vulnerability management, secure coding practices, and automated penetration testing.
Understanding of the OWASP Top 10 application security risks and how to address them.
Working knowledge of the Security Development Lifecycle (SDLC), OWASP Software Assurance Maturity Model (SAMM), or Building Security in Maturity Model (BSIMM).
Understanding of web application security scanning software and related penetration testing tools such as SAST, DAST, IAST, and SCA.
Understanding of service-oriented architecture, building internet-scale, distributed, and critical services.
Experience on integration and automation of various security technologies.

Preferred certifications

Cloud certifications by AWS, GCP, OCI, or Azure.
Kubernetes certifications.
Relevant certifications such as CISSP, CCSP, AWS Certified Security – Specialty, or equivalent are highly desirable.

Essential attributes

A willingness to work as part of a diverse team.
A commitment to continuous improvement and lifelong learning.
A passion for technology and a drive to deliver secure, high-quality solutions.
An ability to remain calm under pressure whilst continuing to pay attention to detail.
Strong analytical and problem-solving skills.
Excellent communication and interpersonal abilities.
Ability to work effectively in a fast-paced and dynamic environment.
Proactive and self-motivated with a keen attention to detail.

Connect to your service line – Technology and Transformation

Distinctive thinking, deep expertise, and collaborative working. That’s what connects us. That’s what makes us Deloitte. If you want to help solve some of the biggest challenges around, join us. Together, we’ll make an impact that matters.

Personal independence

Regulation and controls are standard practice in our industry and Deloitte is no exception. These controls provide important legal protection for both you and the firm. We are subject to several audit regulations, one of which requires that certain colleagues abide by specific personal independence constraints. This can mean that you and your immediate family members are not permitted to hold certain financial interests (shares, funds, bonds, etc.) with audit clients of the firm. The recruitment team will provide further detail as you progress through the recruitment process.

Connect to your industry

“What attracted me to Deloitte were the endless opportunities and the collective experience of other like-minded individuals. Deloitte’s clients include many of the world’s largest organizations; I wanted to be part of a team that made a difference that I could be proud of.” – Dan, Consulting

Connect with your colleagues

Location: Cairo, Egypt

Your work, your way: We call our hybrid working vision Deloitte Works. And it does. We trust you to make the right choices around where, when, and how you work. You’ll be able to make decisions about how you work best, to be collaborative, learn from colleagues, share your experiences, build the relationships that will fuel your career, and prioritize your wellbeing. Having great conversations with your team and your leadership paves the way for great collaborative ways of working.

Our commitment to you

Making an impact is more than just what we do: it’s why we’re here. So we work hard to create an environment where you can experience a purpose you believe in, the freedom to be you, and the capacity to go further than ever before.

We want you. The true you. Your own strengths, perspective, and personality. So, we’re nurturing a culture where everyone belongs, feels supported and heard, and is empowered to make a valuable, personal contribution. You can be sure we’ll take your wellbeing seriously, too. Because it’s only when you’re comfortable and at your best that you can make the kind of impact you, and we, live for.

Your expertise is our capability, so we’ll make sure it never stops growing. Whether it’s from the complex work you do or the people you collaborate with, you’ll learn every day. Through world-class development, you’ll gain invaluable technical and personal skills. Whatever your level, you’ll learn how to lead.

Connect to your next step

A career at Deloitte is an opportunity to develop in any direction you choose. Join us and you’ll experience a purpose you can believe in and an impact you can see. You’ll be free to bring your true self to work every day. And you’ll never stop growing, whatever your level.

Explore more jobs