T&T Consultant / Senior Consultant - Cloud Security & Penetration Testing - MY DRSC

🗓️ Posted 2026-08-14 Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia Full-time Hybrid ICT

Company shared salary

NA

Market rate

RM15,000–RM25,000/mo (RM180,000–RM300,000/yr)

Based on similar roles (title + domain + location).

About the Company

Service Line / Portfolios: Cyber Are you ready to unleash your potential At Deloitte, our purpose is to make an impact that matters for our clients, our people, and the communities we serve. We believe we have a responsibility to be a force for good, and WorldImpact is our portfolio of initiatives focused on making a tangible impact on society's biggest challenges and creating a better future. We strive to advise clients on how to deliver purpose-led growth and embed more equitable, inclusive as well as sustainable business practices. Hence, we seek talented individuals driven to excel and innovate, working together to achieve our shared goals. We are committed to creating positive work experiences that foster a culture of respect and inclusion, where diverse perspectives are celebrated, and everyone is recognised for their contributions. Ready to unleash your potential with us Join the winning team now As a Cyber Defense and Resilience Consultant, you will play a key role in helping Deloitte's clients across the South-East Asia (SEA) market identity and remediate security vulnerabilities across their cloud environments. Your primary focus will be conducting cloud security assessments and security testing across major Hyperscalers, helping clients strengthen their cyber resilience as they scale their cloud footprint. This role combines hands-on technical assessment, security testing, and client advisory, with a dedicated focus on cloud security. Please note that Deloitte will never reach out to you directly via messaging platforms to offer you employment opportunities or request money or your personal information. Kindly apply for roles that you are interested via this official Deloitte website. Requisition ID: 115237 In Malaysia, the services are provided by Deloitte and other related entities in Malaysia ("Deloitte in Malaysia"), which are affiliates of Deloitte Southeast Asia Ltd. Deloitte Southeast Asia Ltd is a member firm of Deloitte Touche Tohma

Requirements

  • Conduct cloud security assessments across hyperscalers including AWS, Microsoft Azure, and Google Cloud Platform, evaluating configurations against security baselines and benchmarks (e.g., CIS Benchmarks, cloud provider security frameworks, CSA CCM).
  • Perform cloud-focused security testing, including vulnerability assessments and penetration testing of cloud infrastructure, cloud-native applications, APIs, and containerized workloads.
  • Simulate cyber attacks against cloud environments to identify configuration weaknesses, privilege escalation paths, and exploitable vulnerabilities.
  • Review cloud identity and access management (IAM) configurations, network security groups, encryption settings, and data protection controls.
  • Assess cloud security posture management (CSPM) and workload protection controls, identifying gaps against client risk appetite and compliance requirements.
  • Develop and execute testing methodologies tailored to cloud-native architectures, serverless services, and multi-cloud environments.
  • Prepare detailed reports on assessment and testing findings, including risk ratings and remediation recommendations specific to cloud environments.
  • Recommend and support implementation of improvements to cloud security posture, guardrails, and policies.
  • Collaborate with client cloud engineering and DevOps teams to validate findings and support remediation efforts.
  • Stay updated with the latest cloud security tools, testing techniques, and hyperscaler service and security feature updates.
  • Support business development activities including proposals and client presentations alongside senior team members.
  • Actively seek out developmental opportunities for growth, act as strong brand ambassadors for the firm as well as share their knowledge and experience with others.
  • Understand the goals of our internal and external stakeholder to set personal priorities as well as align their teams' work to achieve the objectives.
  • Constantly challenge themselves, collaborate with others to deliver on tasks and take accountability for the results.
  • Build productive relationships and communicate effectively in order to positively influence teams and other stakeholders.
  • Project integrity and confidence while motivating others through team collaboration as well as recognising individual strengths, differences, and contributions.