Job Title:  T&T | Cyber: D&R | Consultant | VAPT | Mumbai

The Team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity 

Your work profile 

• Works on projects with clearly defined guidelines as team member with responsibility for project delivery
• Works under general supervision with few direct instructions
• Performs cyber security assessments which includes vulnerability assessment & penetration testing, network security architecture review, secure configuration / code review, etc.
• Understands basic business and information technology management processes.
• Demonstrates knowledge of firm's methodologies, frameworks and tools
• Participate in practice development initiatives

Key Skills Required

Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.

Understanding of basic business and information technology management processes.

Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
Experience on Mobile Security Pen-Testing (iOS and Android).
Experience in conducting config reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
Experience with Vulnerability Management tools: Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
Experience in basic scripting such as: Shell, Python, PERL, etc.
Basic knowledge of Technoilogies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, F5.

Experience on End Point Security, Threat Profiling, Configuration Review
Experience on Firewall and Network Devices Configuration Review.
Strong analytical and communication skills (written, verbal and presentation)
Open to learn new tools and technologies as per the project requirement
Interactive with team members and confident during client meetings, under the guidance of senior members of the project

Initiative & drive
Be deadline-oriented and quality-focused
Familiarity with industry standards and frameworks such as OWASP, CIS, NIST ISO/IEC 17799, etc.
Demonstrates basic knowledge of security and privacy controls and risk management processes
Demonstrates basic knowledge in one or more Cyber Threat Management domains such as: Threat Management, Cyber Operations/Fusion Managed Services, Malware Analysis, Collective Threat Intelligence and Cyber Risk Sciences, Incident Management and Forensics, Data Protection solutions.

Education - B.tech

Candidates must possess security certification of CEH, LPT
Good to have security certification for OSCP, GPEN.