Job Title: T&T I Cyber-D&R I Assistant Manager | Web/Mobile/API Application Security | Mumbai
T&T I Cyber-D&R I Assistant Manager | Web/Mobile/API Application Security | Mumbai
• Job requisition ID : 109128
• Location: Mumbai
• Entity: Deloitte Touche Tohmatsu India LLP
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your work profile
- Work in Web Application Security Testing, Infrastructure VAPT, API testing, Mobile Security Pen-Testing (iOS and Android).
- Works under general supervision with few direct instructions
- Performs cyber security assessments which includes vulnerability assessment & penetration testing, network security architecture review, secure configuration / code review, etc.
- Understands basic business and information technology management processes.
- Demonstrates knowledge of firm's methodologies, frameworks, and tools
- Participate in practice development initiatives The key skills required are as follows:
- Understanding of basic business and information technology management processes
- Knowledge of Technologies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, F5
Key Skills required:
- 4-6yrs of hands-on experience in VAPT, Web and Mobile application
- Experience in Infrastructure Penetration Testing and Application Security Testing
- Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
- Experience on Mobile Security Pen-Testing (iOS and Android).
- Experience on Cloud (AWS & Azure) Configuration and Red Teaming.
- Knowledge of AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.
- Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
- Basic knowledge of Technoilogies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, F5
- Understanding of basic business and information technology management processes
- Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture
- Experience in Infrastructure Penetration Testing and Application Security Testing
- Experience in Secure Code Review (Code Security Review)
- Experience in conducting configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc. • Experience with Vulnerability Management tools: Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
- Experience in basic scripting such as: Shell, Python, PERL, etc.
- Relevant certifications such as OSCP, CRTP, eWPT, GPEN, Burp Suite, CEH, eJPT, OSWE, cloud security certifications (AWS/Azure/GCP) Certified Practitioner, or equivalent certifications will be an added advantage.
- Bachelor’s or Master’s degree in Computer Science, Information Security, or related field.
