Cyber Manager - Cloud DevSecOps

Cyber Cloud Security - DevSecOps Manager

Position Summary

Are you interested in working in a dynamic environment that offers opportunities for professional growth and new responsibilities? If so, Deloitte & Touche LLP could be the place for you.

Traditional security programs have often been unsuccessful in unifying the need to both secure and support technology innovation required by the business.

Join Deloitte's Cloud Cyber Services team and become a member of the largest group of cybersecurity professionals worldwide.

Recruiting for this role will end on 12/31/2026

Work You'll Do

As a DevSecOps Security Manager, you will lead client engagements focused on transforming and scaling Secure-by-Design, DevSecOps, Application Security, and Secure SDLC capabilities across cloud and modern engineering environments.

You will work with security, technology, engineering, risk, and business leaders to translate cybersecurity requirements into practical engineering solutions while enabling organizations to deliver software securely and efficiently.

As a Manager, you will:


* Lead complex DevSecOps and Secure-by-Design engagements, owning delivery from current-state assessment and strategy through roadmap development, solution design, implementation, and operationalization.


* Serve as a trusted advisor and primary day-to-day client contact, working with senior stakeholders across Cybersecurity, Engineering, Cloud, Application Development, Risk, Compliance, and Technology leadership.


* Lead DevSecOps and Secure SDLC maturity assessments across people, process, technology, and governance; identify capability gaps and develop prioritized transformation roadmaps.


* Design and implement Secure-by-Design operating models that integrate security throughout the application lifecycle from business requirements and architecture through development, testing, deployment, and production operations.


* Lead the strategy and adoption of AI-enabled DevSecOps and Application Security, Integrating AI/Agentic capabilities across Secure SDLC and CI/CD for automated security assessments, threat analysis, vulnerability discovery, Triage, and risk-based prioritization.


* Design and implement AI-assisted vulnerability remediation, including root-cause analysis, remediation recommendations, automated code fixes, remediation validation, and integration with existing AppSec, vulnerability management, and developer workflows


* Establish secure AI/Agentic AI governance and guardrails, AI threat Modeling, identity and data protection, prompt-injection controls, secure agent permissions, and metrics to measure automation and remediation effectiveness.


* Define and optimize security engagement and application intake processes, including application risk classification, security assessments, threat modeling, architecture reviews, control validation, approvals, exception management, and go-live governance.


* Translate enterprise security po...