Deloitte Security Team

Open security roles at Deloitte, and what we know about the team behind them.

management consulting · 460000 employees · 2 open roles. Updated October 15, 2026.

Open roles (2)

Deloitte

(Senior) Offensive Security Specialist

Security Intel

Amsterdam, North Holland, Netherlandsmanagement consultingPosted Date unknownVerified 5d ago

“"Makes security consumable to the business." - Developer Enablement vs.”

StackSASTPress release- SCA / Dependency scanningArticle+6 more

View Job

Deloitte

Cyber Senior Consultant - Cloud DevSecOps

Security Intel

Nashville, Tennessee, United Statesmanagement consultingPosted Date unknownVerified 3d ago

“"Makes security consumable to the business." - Developer Enablement vs.”

StackSASTPress release- SCA / Dependency scanningArticle+6 more

View Job

Security at Deloitte

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

“Stated AppSec Mission:"Makes security consumable to the business."– Deloitte Secure by Design (https://www.deloitte.com/us/en/services/consulting/services/secure-by-design.html), Service page. - Developer Enablement vs. Gatekeeping:"Real-time dashboards and developer plugins give clear, actionable feedback"– Deloitte Cyber Insights (https://www.deloitte.com/us/en/services/consulting/articles/the-current-cybersecurity-insights.html), Article. - Risk Philosophy:"The assessment framework and methodology should be standardized"– Deloitte Secure by Design (https://www.deloitte.com/us/en/services/consulting/services/secure-by-design.html), Service page. - Stated Pain Points or Goals (verbatim):"operationalized threat modeling"– Deloitte Secure by Design (https://www.deloitte.com/us/en/services/consulting/services/secure-by-design.html), Service page”

The team

Key Public-Facing Leaders (top public profiles):Kevin Heckel, Managing Director - Deloitte US Cyber Application Leader – https://www.linkedin.com/in/kevinheckel ; Key quote: "Managing Director - Deloitte US Cyber Application Leader"– LinkedIn profile, Profile.Adnan Amjad, Partner | US Cyber Leader – Deloitte people profile (listed on Secure by Design contact section): "Partner | US Cyber Leader"– Deloitte Secure by Design contact (https://www.deloitte.com/us/en/services/consulting/services/secure-by-design.html), Service page. - Team Size Estimate (as_of:):LinkedIn Search Query Used: site:linkedin. - Active AppSec Job Postings (as_of:):Count: 78 – "78 jobs"– Deloitte careers (https://apply.deloitte.com/en_US/careers/SearchJobs/Application%20Security?132=%5B1240%5D&132_format=698&5402=%5B479%5D&5402_format=3876), Careers search page. - Common Skill/Tool Patterns (verbatim mentions across Deloitte pages):"Continuous integration and continuous delivery (CI/CD) pipelines"– Deloitte Cyber Insights (https://www.deloitte.com/us/en/services/consulting/articles/the-current-cybersecurity-insights.html), Article."Static and dynamic analysis (SAST/DAST)"– Deloitte Cyber Insights (https://www.deloitte.com/us/en/services/consulting/articles/the-current-cybersecurity-insights.html), Article."Automated secrets detection"– Deloitte Cyber Insights (https://www.deloitte.com/us/en/services/consulting/articles/the-current-cybersecurity-insights.html), Article. - Gaps & Contradictions:No public evidence found describing AppSec reporting line, exact team size, or named internal security champions

What they're working on

Security Champions Program:Status: No Evidence Found. - "Shift Left"in Practice:"enabling a shift-left approach"– Deloitte Secure by Design (solution in action), Service page."Continuous integration and continuous delivery (CI/CD) pipelines"– Deloitte Cyber Insights. - Vulnerability Management Process (intake, triage, remediation):Intake sources quoted: "assessments might include security architecture review, threat modeling"– Deloitte Secure by Design.Triage/Remediation evidence: "The assignment, status, and service level agreements (SLAs) for security tasks are stored centrally"– Deloitte Secure by Design."automated vulnerability tracking"– Deloitte Secure by Design solution examples. - Secure SDLC Artifacts:"Before deployment, project teams should share how each requirement was met"– Deloitte Secure by Design."Standardized implementation of security requirements offers consistency"– Deloitte Secure by Design (phrase present in page content). - Recent Initiatives (Last 6 Months):"Scaling AppSec for GenAI"– Deloitte Secure by Design (Dec 2025 content)."AI-enabled Secure by Design"– Deloitte Secure by Design. - Gaps & Contradictions:No public SLAs with numeric MTTR or remediation timelines found.
No public documentation of a named internal security champions program.