Red Teaming - Manager

Deloitte Development LLC; Bengaluru; On-site; INR 2,800,000 - 4,500,000; Full time

Job summary

Deloitte Development LLC in Bengaluru invites an experienced Manager to lead cyber defense and resilience engagements, directing offensive security work across applications, APIs, mobile, cloud, and infrastructure to identify and remediate vulnerabilities. You will oversee teams, deliver high-quality assessments, and present risk findings to executives, helping clients strengthen their security posture.

This role requires strong leadership, deep technical skills, and a proven track record in

Qualifications

• 9+ years of cybersecurity experience across risk services, app security, vulnerability assessment, or related roles.

Responsibilities

• Lead penetration testing and application security engagements from scoping through execution, reporting, remediation support, and closure.
• Oversee manual and automated security assessments across web applications, APIs, mobile applications, thick-client applications, infrastructure, and cloud environments.
• Review testing results, prioritize findings using CVE/CVSS/CWE and OWASP guidance, and develop remediation recommendations.
• Present technical findings, risk summaries, and attack paths to client stakeholders and coordinate remediation tracking through resolution.
• Manage engagement delivery, team oversight, quality reviews, reporting, proposal support, and practice development initiatives.

Skills

Cybersecurity expertise

Security testing leadership

Threat modeling

Secure design

Vulnerability management

Tools

Burp Suite

Fiddler

Veracode

Wireshark

dnSpy

IDA Pro

Frida

Apktool

JADX-GUI

EchoMirage

Sysinternals

Job description

Work you'll do

As a Manager on the Cyber Defense & Resilience team, you will be responsible for leading offensive security engagements and helping clients identify, validate, and remediate vulnerabilities across applications, APIs, mobile platforms, thick-client environments, infrastructure, and cloud environments.

• Lead penetration testing and application security engagements from scoping through execution, reporting, remediation support, and closure.
• Oversee manual and automated security assessments across web applications, APIs, mobile applications, thick-client applications, infrastructure, and cloud environments.
• Review testing results, prioritize findings using Common Vulnerabilities and Exposures, Common Vulnerability Scoring System, Common Weakness Enumeration, Open Worldwide Application Security Project guidance, and business impact, and develop remediation recommendations.
• Present technical findings, risk summaries, and attack paths to client stakeholders, technology leaders, risk owners, and executive audiences, and coordinate remediation tracking through resolution.
• Manage engagement delivery, team oversight, quality reviews, reporting, proposal support, and practice development initiatives.

The team

Cyber Defense & Resilience teams help clients identify, prioritize, and remediate vulnerabilities across their digital ecosystem through penetration testing, application security, Attack Surface Management, adversary simulation, and related cybersecurity services. By continuously assessing client environments—including networks, applications, cloud assets, endpoints, APIs, and mobile platforms—our teams proactively identify exposure points before threat actors can exploit them. Penetration testing and application security are foundational capabilities within the Cyber Defense & Resilience portfolio, enabling clients to validate preventive and detective controls, reduce attack paths, and improve overall cyber resilience.

Location: Bengaluru/Hyderabad/Pune/Chennai

Shift Timings: General

Qualifications

Required:

• 9+ years of experience in cybersecurity, cyber risk services, application security, vulnerability assessment, penetration testing, or technical security roles.
• 7+ years of hands-on experience in application security, vulnerability assessment, penetration testing, mobile application security, thick-client security, and web application programming interface security assessments.
• Experience leading penetration testing and application security engagements, including planning, execution, quality review, reporting, and remediation support.
• Experience performing secure code reviews, threat modeling, application security architecture reviews, or secure design assessments.
• Experience using tools such as Burp Suite, Fiddler, Veracode, Sysinternals, Wireshark, dnSpy, IDA Pro, EchoMirage, Apktool, JADX-GUI, or Frida.
• Knowledge of OAuth 2.0, OpenID Connect, authentication and authorization models, session management, and application security vulnerabilities.
• One or more cybersecurity certifications such as Certified Information Systems Security Professional, Offensive Security Certified Professional, Offensive Security Web Expert, GIAC Penetration Tester, GIAC Web Application Penetration Tester, or CREST certification.

Preferred:

• Experience with cloud, container, microservices, mobile, thick-client, or application programming interface security assessments.
• Experience with red team, purple team, breach and attack simulation, or adversary emulation engagements.
• Experience testing artificial intelligence-enabled applications, large language model integrations, machine learning systems, or AI-assisted business processes.
• Experience assessing Amazon Web Services, Microsoft Azure, or Google Cloud environments, including identity and access management, Kubernetes, and hybrid infrastructure.
• Experience with Python, PowerShell, Bash, or comparable scripting languages used for security testing or automation.
• Publications, conference presentations, research, disclosed Common Vulnerabilities and Exposures, or offensive security methodology development.