Join Deloitte's Cyber Security team as an Application Security Consultant in Pune, India. This role involves safeguarding organizations against cyber threats and protecting critical assets. You will be instrumental in managing cyber risk, enabling new opportunities by embedding security into strategic development.

Deloitte is dedicated to helping clients achieve security, vigilance, and resilience in the face of evolving cyber threats. Our approach integrates cyber risk management into the core of business strategy, ensuring effective management of information and technology risks.

As an Application Security Consultant, you will lead and execute offensive security engagements, including Vulnerability Assessment and Penetration Testing (VAPT), Red Teaming, Cloud Security Assessments, and Security Architecture Reviews.

You will conduct AI Security Assessments and Exposure Management to identify emerging risks within modern enterprise environments. Your role will also involve managing Cyber Security Assessment projects, providing daily guidance to the team, and ensuring timely fulfillment of tasks. You will interact with clients and stakeholders to build strong relationships and tailor firm methodologies to meet client-specific needs.

Ideal candidates will possess 3–5 years of experience in Cyber Security, with a strong background in VAPT, encompassing Application Security, Mobile Application Security, API Security, and Infrastructure Security.

Demonstrated experience in AI Offensive Security and AI Security Assessments is crucial, including LLM Security Testing, Generative AI Security, Agentic AI Security, Prompt Injection Testing, and understanding OWASP Top 10 for LLM Applications. Experience with DevSecOps and Secure SDLC implementations, including CI/CD pipeline security, SAST, DAST, SCA, and container security, is highly valued.

A Bachelor’s degree in Information Security, Computer Science, or a related field is required, while a Master’s degree in Cybersecurity or Business Management is preferred. Strong knowledge of industry frameworks like OWASP Top 10, NIST, and MITRE ATT&CK is essential.