Job Title: T&T I Cyber: D&R I Senior Analyst | Incident Response & Handling | Mumbai
T&T I Cyber: D&R I Senior Analyst | Incident Response & Handling | Mumbai
• Job requisition ID : 116767
• Location: Mumbai
• Entity: Deloitte Touche Tohmatsu India LLP
The team
Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Learn more about Cybersecurity
Your work profile
Conduct source code security assessment for all in-scope internal and external applications, server library code once in annual or when the change in code has been made (whichever applicable first).
Provide report with findings, Impact, severity and recommendations.
All Test cases and parameters should be covered as per the standard OWASP Secure Coding Practices checklist.
Manual assessments with false positive elimination (If required).
Support team for closure.
Dashboard having detail of Vulnerability along with Severity and Closure status along with Customizable dashboard.
Technical assistance for Audit like internal and external audit.
Assistance and preparation of advisory / Threat feeds
Review of Internal reports and external reports.
Follow-up with respective stakeholders for the closure of open vulnerabilities.
To Maintain a consolidated tracker for the activities performed on daily basis.
Secure coding training to application development teams across the organization to promote the adoption of secure development practices
Maintenance and management SCR tool and manage the user creation/deletion/dormant user removal.
Follow up with OEM in case of hardware failure, firmware upgrade, raised ticket, and ensure OEM SLA is met
Ensure back-up is taken on a monthly basis.
Ensure tool is updated with latest updates as and when it is released by vendor.
Key skills required
Web I Mobile Appsec , Source Code Review
Software Composition Analysis (SCA), Secret Scan
API Assessment, Conduct Appsec on Production Environment.
Provide external closure report (in PDF) with findings, impact, recommendations and POC’s.
Assist & Support team for closing the vulnerability (if any)
External Assessment (Onsite & Offsite) quarterly, monthly rescan should be performed.
Assessment should be performed based on security standards such as OWASP Top 10, NIST.
Detailed Management level MIS and Dashboard creation to be captured on fortnight basis.
Master's or Bachelor’s degree in Cybersecurity, Information Technology, or related field.
