Join Deloitte Touche Tohmatsu India LLP's Cyber team as a Manager, focusing on Application Security and Attack Surface management for web, mobile, and API platforms. This role is integral to our mission of helping organizations build resilience against cyber threats, manage information technology risks effectively, and unlock new opportunities through secure practices. You will be part of a dynamic team dedicated to preventing cyberattacks and protecting valuable assets.

We champion a proactive approach to cybersecurity, embedding risk management into the initial stages of strategy development. This ensures that information and technology risks are managed comprehensively, allowing businesses to innovate with confidence. Explore more about our Cybersecurity services to understand our commitment to a secure digital future.

As a Manager in our Cyber team, you will lead projects with defined objectives, contributing significantly to delivery. While working under general supervision, you will conduct comprehensive cybersecurity assessments. This includes performing vulnerability assessments, penetration testing, reviewing network security architecture, and analyzing secure code and configurations.

You will also be responsible for understanding fundamental business and information technology management processes. Demonstrating proficiency with the firm's methodologies, frameworks, and tools is key. Additionally, you'll actively participate in practice development initiatives, sharing your expertise and contributing to the team's growth.

To excel in this role, you should possess 8-13 years of experience in cybersecurity, with a strong understanding of business and IT management processes. A solid grasp of TCP/IP networking, including firewalls, IDS/IPS, routers, switches, and network architecture is essential.

We require hands-on experience in infrastructure penetration testing and application security testing, alongside secure code review. The ability to conduct configuration reviews for various operating systems (Windows, Linux, UNIX, Solaris) and databases is also crucial.

Proficiency with vulnerability management tools such as Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, and Fortify is expected. Experience with scripting languages like Shell, Python, or PERL is also necessary. A foundational knowledge of technologies including IPSEC, SSL, SSH, VPN, and various network protocols is beneficial.

Candidates should hold a B.tech, B.E, BCA, or a Master's degree, or possess equivalent qualifications.