Join Deloitte's Cyber team as a Consultant specializing in Vulnerability Assessment and Penetration Testing (VAPT). This role focuses on identifying and mitigating security risks for organizations, enabling them to operate securely and resiliently.

As part of our Cybersecurity practice, you will help clients proactively prevent cyberattacks and protect their valuable assets. We emphasize embedding cyber risk management into strategic development for effective information and technology risk management. Explore more about our Cybersecurity offerings.

Conduct comprehensive Vulnerability Assessments and Penetration Tests (VAPT) for web applications, mobile applications, APIs, and cloud-hosted environments. Ensure security testing adheres to industry standards like OWASP Top 10, OWASP API Security Top 10, SANS Top 25, and CWE. You will also support remediation efforts and contribute to enhancing the overall security posture of client organizations.

Gain experience in AI/LLM concepts and Generative AI applications, understanding common architectures and security implications. This includes assisting in AI penetration testing of LLM-based applications, chatbots, and RAG solutions, utilizing defined methodologies and tools. Familiarity with AI security testing tools and basic AI guardrail validation techniques is essential.

We are looking for an Application & API VAPT Analyst with 2 to 5 years of experience in cybersecurity. A strong understanding of business and IT management processes, coupled with solid knowledge of TCP/IP, networks, firewalls, and architecture, is required. Experience in web application security, infrastructure VAPT, and API testing is crucial.

Familiarity with AI security testing methodologies, including Prompt Injection and Jailbreak Testing, is needed. Proficiency with vulnerability management and penetration testing tools such as Burp Suite, Kali Linux, Metasploit, and Nessus is expected. Basic scripting skills in Python or Shell are beneficial. A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is necessary. Relevant AI Security or Penetration Testing certifications are advantageous.