Join Deloitte's Cyber Defense & Resilience team in Pune as an Assistant Manager specializing in Web, Mobile, and API Application Security. This role is integral to our mission of helping organizations prevent cyberattacks and protect valuable assets, ensuring security, vigilance, and resilience.

We focus on proactive cyber risk management, embedding security at the forefront of strategy development to effectively manage information and technology risks. Explore how Cybersecurity can empower your organization to unleash new opportunities.

As a key member of the team, you will validate security controls and remediation efforts implemented by Development and DevOps teams. Your work will ensure that vulnerabilities are effectively addressed and applications consistently meet Secure SDLC and compliance requirements.

This role involves identifying, validating, and reporting application security vulnerabilities. You will collaborate closely with development teams to champion secure software development practices and contribute to building robust, secure applications.

We seek an Application Security Engineer with practical experience in assessing the security of web, mobile, and API applications. Your responsibilities will include performing comprehensive security assessments and penetration tests, identifying vulnerabilities aligned with industry standards like OWASP Top 10, and conducting both manual and automated testing.

Key duties involve supporting secure code reviews, providing remediation guidance, assisting with threat modeling and risk assessments, and preparing clear technical reports. Candidates should possess 2-5 years of experience in Application Security or Penetration Testing, with a strong grasp of web, mobile, and API security concepts. Proficiency with tools like Burp Suite, OWASP ZAP, MobSF, and Postman is essential. Familiarity with programming languages, application architectures, and security principles like authentication and encryption is expected.