Join Deloitte's Cybersecurity team as an Assistant Manager specializing in Application & API VAPT. This role focuses on preventing cyberattacks and protecting valuable assets by embedding security into strategy development.

We are seeking an experienced professional to lead application security assessments, mentor team members, and manage client engagements. The ideal candidate will possess deep technical expertise in offensive security, application and API penetration testing, and vulnerability management, while also being skilled in driving security initiatives and communicating with stakeholders.

Lead comprehensive Vulnerability Assessment and Penetration Testing (VAPT) for web applications, APIs (REST, SOAP, GraphQL), mobile applications, cloud-hosted solutions, and microservices.

Execute advanced penetration testing techniques, including manual testing beyond automated findings, threat modeling, and attack surface analysis. Validate vulnerabilities identified through SAST, DAST, and SCA tools, and conduct secure architecture reviews.

Perform cloud application security assessments across Azure, AWS, and GCP, and support container and Kubernetes security evaluations.

Manage and lead a team of VAPT consultants, review penetration testing reports for quality, and allocate resources across multiple engagements. Mentor junior team members and drive remediation discussions with development teams.

A minimum of 4-7 years of hands-on experience in Application Security and Penetration Testing is required.

Possess at least 2 years of experience in leading or mentoring security teams, along with proven experience managing enterprise-scale VAPT programs.

Exceptional report-writing and stakeholder management skills are essential, complemented by strong verbal and written communication abilities.

Candidates should hold a Bachelor's or Master's degree in Computer Science, Information Security, or a related field. Relevant certifications such as OSCP, OSWE, GWAPT, or CISSP are highly preferred for leadership roles.