Join Deloitte's Cybersecurity team in Mumbai as a Manager focused on D&R (Defense & Response) within Application Security. This role involves securing web, mobile, and API applications by managing the attack surface.

Deloitte is dedicated to helping organizations prevent cyberattacks and safeguard their critical assets. We champion a proactive approach, emphasizing security, vigilance, and resilience. Our mission extends beyond merely preventing and responding to incidents; it's about strategically managing cyber risk to unlock new opportunities and embedding security from the outset of strategy development for effective information and technology risk management.

As a team member, you will contribute to project delivery under clearly defined guidelines, operating with general supervision. Your responsibilities will include conducting comprehensive cyber security assessments, encompassing vulnerability assessments and penetration testing.

You will also perform network security architecture reviews, secure code reviews, and ensure secure configurations for various systems. Understanding fundamental business and IT management processes is key, as is demonstrating familiarity with the firm's methodologies, frameworks, and tools. Participation in practice development initiatives is also expected.

Candidates should possess a strong understanding of fundamental business and IT management processes. Essential technical skills include a good grasp of TCP/IP and networking concepts, including firewalls, IDS/IPS, routers, switches, and network architecture.

Demonstrated experience in infrastructure penetration testing, application security testing, and secure code review is required. Proficiency in conducting configuration reviews for operating systems like Windows, Linux, UNIX, Solaris, and databases is also necessary.

Familiarity with vulnerability management tools such as Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, and Fortify is important. Basic scripting abilities in Shell, Python, or PERL are also valued. A foundational knowledge of technologies like IPSEC, SSL, SSH, VPN, and various networking protocols is beneficial.