




Job Summary: We are seeking an Application Security expert to define, establish, and ensure secure development practices under the “Secure by Design” principle at Deloitte. Key Highlights: 1. Participate in the transformation of national and international organizations 2. Work with social impact, clients, and personal development 3. Hybrid-flexible environment balancing remote work and office work Can you imagine participating in the transformation of leading national and international organizations? At Deloitte, we are committed to generating impact on society, our clients, and you. We are looking to hire an experienced Application Security professional whose role focuses on defining, establishing, and ensuring secure development practices under the “Secure by Design” principle, working closely with IT, Product Development, and Security teams. What is the challenge? Define, execute, and monitor strategic solutions to transform the Secure Software Development Life Cycle (SSDLC). Ensure continuous end-to-end security monitoring for applications and platforms, proactively identifying and mitigating risks. Lead and coordinate communication sessions with technical teams and senior management, delivering clear reports on project status and progress. Review source code, identify vulnerabilities and false positives, and provide technical support to development teams. Provide recommendations on security best practices and solutions to security issues. Support analysis and preparation of proposals. Identify software or project impacts and risks, clearly communicating them to both technical and executive stakeholders, and resolving complex challenges. Prepare technical documentation meeting high-quality standards. Present security results to diverse audiences. How do we envision you? More than 3 years of experience in software and application security, SSDLC, and AppSec. Specialized education and/or certifications in application security and secure development. Knowledge and experience in threat modeling, security design reviews, secure architectures, and development patterns. Experience in maturity assessments of services, projects, or processes, as well as gap analysis. Familiarity with security standards such as OWASP, MITRE CWE/CVE, ASVS. Experience with CI/CD, DevSecOps, and process automation. High-level knowledge of cloud architectures (AWS, Azure, or GCP). Fluent English (B2 level) and ability to produce technical documentation and security results presentations. What is it like to work at Deloitte? High-impact projects offering long-term growth and learning opportunities **️ A hybrid-flexible day-to-day:** flexible working hours and a healthy balance between remote work and team collaboration in our offices or at client sites **A positive atmosphere both inside and outside the office:** enjoy several team-building events per year, cultural and sports activities… and much more! ** ️ Holistic wellbeing:** take care of yourself with our physical, mental, and financial health program… and with on-site medical staff in our offices! **Social impact:** You can join numerous national and international volunteering initiatives and pro-bono projects, dedicating your time and talent to those who need it most. **️ Feedback-driven culture and continuous learning:** grow within an inclusive environment where equal opportunity and your personalized training plan will drive your development. Can you already picture yourself at the Deloitte University in Paris? **Exclusive benefits as a Deloitte professional:** enjoy an extensive catalog of benefits and a comprehensive flexible compensation plan. **If this resonates with you, here are your next steps:** Apply for this position by clicking “Submit Application Now” and completing your profile. If you match the role, our Talent team will contact you to learn more about you. Deloitte is a professional services firm firmly committed to equal opportunity. In this regard, the Firm accepts and processes applications from all sectors of society without discrimination based on gender, gender expression, race, religion or beliefs, ethnic or national origin, disability, illness or health condition, genetic predisposition to disease, age, citizenship, marital status, sexual orientation or gender identity, socioeconomic status, or any other personal or social circumstance. **Location:** Madrid **Position Type:** Experienced Professionals **Service Line:** T&T **Req Id:** 46258


