Join a leading cybersecurity team at Deloitte, dedicated to safeguarding organizations from cyber threats and protecting critical assets. We focus on building secure, vigilant, and resilient environments, integrating cyber risk management into strategic development for effective information and technology risk management. Explore opportunities within our Cybersecurity practice.

This role involves leading and executing comprehensive vulnerability assessments and penetration tests across various platforms, including web applications, APIs, mobile applications, and cloud-hosted environments. You will employ advanced techniques to identify and exploit vulnerabilities, moving beyond automated findings with manual testing and in-depth analysis.

Your responsibilities will extend to managing and mentoring a team of VAPT consultants, ensuring high-quality deliverables through thorough report reviews, and effectively allocating resources for multiple engagements. Driving remediation discussions and participating in executive-level security reviews are key aspects of this leadership position.

Lead end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements for web applications, APIs (REST, SOAP, GraphQL), mobile applications (iOS & Android), cloud-hosted applications, and microservices architectures.

Execute advanced manual penetration testing techniques to identify and exploit vulnerabilities, going beyond automated scanner findings. Conduct threat modeling and attack surface analysis, validating vulnerabilities identified by SAST, DAST, and SCA tools.

Perform secure architecture and security design reviews, along with cloud application security assessments on Azure, AWS, and GCP. Support container and Kubernetes security assessments. Manage and lead a team of VAPT consultants and security analysts, reviewing penetration testing reports for quality deliverables and allocating resources for multiple engagements.

A minimum of 6-9 years of dedicated experience in Application Security and Penetration Testing is essential, complemented by at least 3 years of experience in leading or mentoring security teams. Proven experience managing enterprise-scale VAPT programs is required.

Possess strong analytical skills, including a deep understanding of OWASP Top 10, OWASP API Security Top 10, MITRE ATT&CK Framework, and CWE/SANS Top 25. Demonstrated hands-on exploitation experience in web application, API, and mobile application penetration testing, including authentication, session management, and business logic testing.

Knowledge of infrastructure security, including network penetration testing, Active Directory security, internal/external network assessments, cloud security, and container security is necessary. Excellent report-writing and stakeholder management skills are vital. A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required. This role mandates working from the office in Bengaluru.