Deloitte USI
Consultant, Cyber Engineering-Platform Security Engineer- Hyderabad
Skills
Job description
A Platform Security Engineer performs security assessments of enterprise applications and technology platforms to confirm they are securely configured, properly integrated, and aligned with organizational security requirements. This role evaluates Software as a Service, commercial off-the-shelf, and internally hosted platforms to identify security risks beyond traditional vulnerability scanning and application code reviews. The role focuses on platform configuration security, access controls, integration security, data protection, logging, monitoring, and security hardening.
Work you'll do
As a Platform security Engineer on the Member firm team, you will be responsible for:
Conduct security assessments of enterprise business platforms and data or analytics platforms to evaluate platform security configurations, access governance, and secure workflows
Review solution designs, integrations, data flows, application programming interfaces, service accounts, and encryption controls to identify security risks across platform ecosystems
Assess security settings, baseline configurations, hardening controls, audit logging, monitoring, alerting, retention, privileged roles, and segregation of duties
Document findings, provide risk-based recommendations, track remediation activities, support exception reviews and compliance initiatives, and maintain assessment methodologies and platform-specific checklists
Collaborate with application owners, platform administrators, architects, cloud teams, identity and access management teams, and project stakeholders to provide security guidance and present assessment results
The team
This team helps protect enterprise platforms, applications, and data by assessing security risks and strengthening control environments across the technology landscape. The team works with platform owners, architects, cloud teams, and business stakeholders to improve security posture, support secure implementations, and promote consistent security practices across enterprise services.
Location: Hyderabad
Shift Timings: 2 PM to 11 PM
Qualifications
Required:
5-7 years of experience in enterprise security, security assessment, platform security, governance, risk, and compliance, identity and access management, or security architecture
Experience conducting security assessments of Software as a Service, commercial off-the-shelf, or internally hosted technology platforms
Experience reviewing authentication, authorization, role-based access control, privileged access management, single sign-on, multifactor authentication, or federation configurations
Experience assessing encryption controls for data at rest and data in transit, logging controls, monitoring controls, or platform hardening configurations
Experience documenting security findings, assigning risk ratings, tracking remediation activities, and validating closure of identified issues
Experience presenting assessment results to platform owners, technology leaders, or security governance stakeholders
Preferred:
Experience assessing Salesforce, ServiceNow, SAP, SuccessFactors, SharePoint, OpenText, Siebel, Workday, or Microsoft 365 platforms
Experience assessing Azure Databricks, Snowflake, Microsoft Fabric, Synapse Analytics, Tableau, or Power BI platforms
Experience reviewing application programming interfaces, third-party integrations, or service account security configurations
Experience with Center for Internet Security Benchmarks, Open Worldwide Application Security Project guidance, National Institute of Standards and Technology frameworks, or ISO/IEC 27001
Experience supporting security exception reviews, compliance initiatives, or platform-specific review methodology development