T&T I Cyber-D&R I Consultant | Web/Mobile/API Application Security | Mumbai (Mumbai, IN)
Deloitte
Deloitte
Join a leading cybersecurity team dedicated to helping organizations proactively prevent cyberattacks and safeguard critical assets. We focus on building resilience by not only responding to threats but also by embedding cyber risk management into strategic development, enabling new opportunities through effective information and technology risk management.
This role involves essential work in application security, ensuring the robustness of web, mobile, and API platforms. You will contribute to a secure digital environment by performing comprehensive assessments and staying ahead of evolving threats.
Engage in comprehensive Web Application Security Testing, Infrastructure VAPT, and API testing. Conduct Mobile Security Pen-Testing for both iOS and Android platforms. Perform thorough cyber security assessments, including vulnerability and penetration testing, network security architecture reviews, and secure code reviews. Understand and apply fundamental business and IT management processes, leveraging firm methodologies and tools.
Key duties include identifying and analyzing security weaknesses, reporting findings, and recommending remediation strategies. You'll also participate in practice development initiatives to enhance the team's overall capabilities and stay abreast of emerging security challenges.
A minimum of 2-4 years of hands-on experience in VAPT, Web, and Mobile application security is essential. Proficiency in Infrastructure Penetration Testing and Application Security Testing is required. Experience with Cloud security (AWS & Azure) configuration and Red Teaming, as well as knowledge of AI/LLM penetration testing for Generative AI applications, is highly valued.
Familiarity with technologies such as IPSEC, SSL, SSH, VPN, and network protocols is expected. A good understanding of TCP/IP, networks, firewalls, IDS/IPS, routers, switches, and network architecture is crucial. Experience with vulnerability management tools like Kali Linux, Nessus, Nmap, and Metasploit is necessary, alongside basic scripting skills in Shell, Python, or PERL. A Bachelor's or Master's degree in Computer Science, Information Security, or a related field is required.
Deloitte
IT Consulting