Associate Director - VAPT

Embark; Delhi; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Deloitte in Delhi seeks a dynamic Cybersecurity leader to steer the Cyber Defence and Resilience practice. You will lead vulnerability management, DevSecOps integration, penetration testing, and secure SDLC initiatives across client engagements, delivering high-impact security solutions.

You will mentor diverse cyber teams, drive executive communications, and align security offerings with business objectives while advancing Deloitte’s leadership in cyber assurance and risk management.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field.
• Experience: 15+ years of relevant experience, with 5+ years in leadership roles across cyber domains.
• Certifications: CISSP, OSCP, CISM, CEH, GPEN, or equivalent expert-level certification(s).
• Deep hands-on expertise in threat & vulnerability management, security testing tools/methodologies, and secure application development practices.
• Strong communication, client management, and team leadership skills.

Responsibilities

• Lead delivery of Cyber Defence projects across vulnerability management, DevSecOps integration, penetration testing, and secure SDLC.
• Lead and guide advanced penetration testing – covering internal/external networks, web/mobile applications and cloud environments – with actionable reporting.
• Design and implement enterprise-wide vulnerability management programs, establish metrics, and advise clients on remediation strategy.
• Oversee advanced security assessments, including application security (SAST/DAST), network penetration testing, and infrastructure assessments.
• Embed security into CI/CD pipelines, driving automation across development and deployment.
• Support testing strategy and execution across on-premise, cloud and converged infrastructure.
• Serve as a strategic advisor to clients, presenting findings, driving executive communications, and aligning solutions to business goals.
• Mentor diverse cybersecurity teams and contribute to the growth of Deloitte’s security offerings.

Skills

Vulnerability management

DevSecOps

Penetration testing

Secure SDLC

CI/CD security

Leadership

Client management

Threat modeling

Education

Bachelor’s or Master’s degree in Computer Science or Cybersecurity

Tools

SAST/DAST tools

Penetration testing tools

CI/CD tooling

Job description

As a part of our Cyber Defence and Resilience team you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations.

Deloitte is seeking a dynamic and experienced professional to lead its Cyber Security Practice, with core expertise in vulnerability management, DevSecOps, penetration testing, application and network security. This leader will play a key role in shaping and scaling attack management services, delivering high-impact solutions to clients, and guiding the next generation of cyber professionals.

Key Skills & Expertise

• Experience : 15-20 Years
• Lead delivery of Cyber Defence projects across vulnerability management, DevSecOps integration, penetration testing, and secure SDLC.
• Lead and guide advanced penetration testing – covering internal/external networks, web/mobile applications and cloud environments – with actionable reporting.
• Design and implement enterprise-wide vulnerability management programs, establish metrics, and advise clients on remediation strategy.
• Oversee advanced security assessments, including application security (SAST/DAST), network penetration testing, and infrastructure assessments.
• Embed security into CI/CD pipelines, driving automation across development and deployment.
• Support testing strategy and execution across on-premise, cloud and converged infrastructure.
• Serve as a strategic advisor to clients, presenting findings, driving executive communications, and aligning solutions to business goals.
• Mentor diverse cybersecurity teams and contribute to the growth of Deloitte’s security offerings.

Key Responsibilities:

As a part of our Cyber Defence and Resilience team you’ll build and nurture positive working relationships with teams and clients with the intention to exceed client expectations.

Deloitte is seeking a dynamic and experienced professional to lead its Cyber Security Practice, with core expertise in vulnerability management, DevSecOps, penetration testing, application and network security. This leader will play a key role in shaping and scaling attack management services, delivering high-impact solutions to clients, and guiding the next generation of cyber professionals.

Key Skills & Expertise

• Experience : 15-20 Years
• Location: Delhi
• Lead delivery of Cyber Defence projects across vulnerability management, DevSecOps integration, penetration testing, and secure SDLC.
• Lead and guide advanced penetration testing – covering internal/external networks, web/mobile applications and cloud environments – with actionable reporting.
• Design and implement enterprise-wide vulnerability management programs, establish metrics, and advise clients on remediation strategy.
• Oversee advanced security assessments, including application security (SAST/DAST), network penetration testing, and infrastructure assessments.
• Embed security into CI/CD pipelines, driving automation across development and deployment.
• Support testing strategy and execution across on-premise, cloud and converged infrastructure.
• Serve as a strategic advisor to clients, presenting findings, driving executive communications, and aligning solutions to business goals.
• Mentor diverse cybersecurity teams and contribute to the growth of Deloitte’s security offerings.

Requirements

Required Skill Set:

• Education: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
• Experience: 15+ years of relevant experience, with 5+ years in leadership roles across cyber domains.
• Certifications: CISSP, OSCP, CISM, CEH, GPEN, or equivalent expert-level certification(s).
• Deep hands-on expertise in threat & vulnerability management, security testing tools/methodologies, and secure application development practices.
• Strong communication, client management, and team leadership skills.

Preferred Skills:

• Knowledge of cloud security frameworks and risk regulations (NIST, ISO 27001, PCI DSS, etc).
• Experience managing large-scale consulting engagements or security programs