T&T I Cyber-D&R I Consultant | Web/Mobile/API Application Security | Mumbai
Deloitte
Deloitte
Join a leading cybersecurity team focused on preventing cyberattacks and safeguarding critical assets. This role involves embedding cyber risk management into strategic development to effectively handle information and technology risks, enabling the exploration of new opportunities.
This position offers the chance to contribute to practice development initiatives and work within a team that prioritizes being secure, vigilant, and resilient against evolving cyber threats.
As a consultant, you will work on projects with defined guidelines, taking responsibility for project delivery under general supervision. Your core duties will include performing comprehensive cybersecurity assessments, such as vulnerability and penetration testing, reviewing network security architecture, and evaluating secure configurations.
You will also conduct secure code reviews and configuration assessments across various platforms including Windows, Linux, UNIX, Solaris, and databases. Leveraging your expertise with vulnerability management tools and scripting languages will be crucial for identifying and mitigating security risks effectively.
This role requires 2-4 years of hands-on experience in Vulnerability Assessment and Penetration Testing (VAPT), with a strong focus on web and mobile applications. A solid understanding of basic business and information technology management processes is essential.
Proficiency in TCP/IP networking, including firewalls, IDS/IPS, routers, switches, and network architecture is expected. Experience in infrastructure penetration testing, application security testing, and secure code review is also a key requirement.
Familiarity with vulnerability management tools such as Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, and Fortify is necessary. Basic scripting skills in Shell, Python, or PERL are beneficial.
A Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field is required. Knowledge of various technologies like IPSEC, SSL, SSH, VPN, and network protocols is also important.
Deloitte
Information Technology & Services