Join Deloitte's T&T I Cyber team as an Assistant Manager, focusing on D&R within Web, Mobile, and API Application Security. This role is based in Mumbai and involves contributing to projects with clearly defined guidelines while taking responsibility for delivery. You'll work under general supervision, performing critical cyber security assessments.

Deloitte empowers organizations to defend against cyber threats and safeguard vital assets. We champion a secure, vigilant, and resilient approach, not just in preventing and responding to attacks, but in managing cyber risk to unlock new opportunities. We encourage embedding cyber risk management from the outset of strategy development for effective information and technology risk management.

Perform comprehensive cyber security assessments, including vulnerability assessment and penetration testing. Conduct network security architecture reviews and analyze secure configurations. Execute secure code reviews to identify and mitigate security vulnerabilities. Understand and apply basic business and information technology management processes. Utilize firm methodologies, frameworks, and tools to ensure effective project delivery. Actively participate in practice development initiatives to enhance team capabilities.

A Bachelor's degree in Technology (B.Tech), Engineering (B.E), Computer Applications (BCA), or an equivalent qualification is required. Possess a strong understanding of basic business and information technology management processes. Demonstrate good knowledge of TCP/IP and network components, including Firewalls, IDS/IPS, Routers, Switches, and network architecture. Gain experience in Infrastructure Penetration Testing and Application Security Testing. Showcase experience in Secure Code Review (Code Security Review). Have experience conducting configuration reviews for operating systems (Windows, Linux, UNIX, Solaris) and databases. Familiarity with Vulnerability Management tools such as Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, and Fortify is essential. Possess basic scripting skills in languages like Shell, Python, or PERL. Have foundational knowledge of technologies including IPSEC, SSL, SSH, VPN, Ethernet, Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, and F5.