Join Deloitte Touche Tohmatsu India LLP's Cyber team as an Assistant Manager specializing in Vulnerability Assessment and Penetration Testing (VAPT). This role is based in Bengaluru and focuses on protecting organizations from cyber threats through proactive security assessments. You will be instrumental in identifying and mitigating risks, ensuring the resilience of our clients' digital assets.

Deloitte is dedicated to helping businesses stay secure, vigilant, and resilient against cyberattacks. We integrate cybersecurity into strategic development to effectively manage information and technology risks, enabling new opportunities. Explore more about our Cybersecurity services.

Lead comprehensive Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, APIs (REST, SOAP, GraphQL), mobile apps, cloud-hosted solutions, and microservices. Employ advanced manual penetration testing techniques to uncover vulnerabilities beyond automated scans, including threat modeling and attack surface analysis. Validate findings from SAST, DAST, and SCA tools, and conduct secure architecture and design reviews. Assess cloud security on Azure, AWS, and GCP, and support container and Kubernetes security.

Manage and guide a team of VAPT consultants and security analysts. Ensure the quality of penetration testing reports and efficiently allocate resources across multiple engagements. Mentor junior team members in offensive security practices and lead remediation discussions with development teams. Represent the team in client meetings and track key metrics for risk reduction initiatives.

We are seeking an experienced Assistant Manager with 4-7 years of hands-on penetration testing experience. A minimum of 2 years leading or mentoring security teams is essential. You should have proven experience managing enterprise-scale VAPT programs, coupled with excellent report-writing and stakeholder management skills. Strong verbal and written communication abilities are crucial. A Bachelor's degree in Computer Science, Information Security, or a related field is required.

Preferred certifications include OSCP, OSWE, GWAPT, eWPT, eWPTX, PNPT, CEH, CREST, or CISSP (especially for leadership roles).