Red Teaming - Senior Consultant

Deloitte Development LLC; Bengaluru; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Deloitte Development LLC is seeking a Senior Consultant in Cyber Defense & Resilience to support client engagements in offensive security, threat simulation, and resilience improvements. The role focuses on adversary emulation, vulnerability assessment, and security operations transformation across multiple engagements.

You will contribute to complex cybersecurity projects including attack simulation, threat management, and security transformation, collaborating with cross-functional teams.

Qualifications

• 6–10 years of cybersecurity experience with hands-on offensive security.
• Experience with at least two: penetration testing, red teaming, phishing, threat management, or adversary simulation.
• Bachelor’s degree in Computer Science or equivalent.
• CEH, CompTIA Security+ and OSCP/OSWP or similar advanced certs.

Responsibilities

• Support delivery of offensive security and cyber defense engagements.
• Develop and customize security and data protection implementations.
• Execute assessments, simulations, and analyses with limited supervision.
• Apply Deloitte methodologies and security frameworks.
• Contribute to practice development, documentation, reporting, and coordination.

Skills

Penetration testing

Red teaming

Threat management

Adversary simulation

Python scripting

PowerShell scripting

Bash scripting

Education

Bachelor's degree in Computer Science

Tools

Nmap

Metasploit

Cobalt Strike

IDA Pro

Ghidra

Job description

Join Deloitte Cyber and help organizations address evolving cyber threats through offensive security, threat simulation, and resilience services. As a Senior Consultant in the Cyber Defense & Resilience practice, you will support client engagements focused on adversary emulation, vulnerability assessment, and security operations improvement. This role offers the opportunity to contribute to complex cybersecurity projects across attack simulation, threat management, and security transformation.

Work you'll do

As a Senior Consultant on the Cyber team, you will be responsible for supporting project delivery across offensive security and cybersecurity transformation engagements.

• Support delivery of offensive security and cyber defense engagements under defined operating procedures and service level expectations.
• Perform development and customization activities for security and data protection technology implementation projects.
• Execute assessments, simulations, and analysis activities with limited supervision while contributing to quality and timeliness of deliverables.
• Apply knowledge of business processes, information technology management processes, and Deloitte methodologies, frameworks, and tools.
• Contribute to practice development initiatives, documentation, reporting, and engagement coordination activities.

The team

Cyber Defense & Resilience teams assist clients in defending against advanced threats by transforming security operations, and by monitoring technology, data analytics, and threat intelligence. They help manage and protect dynamic attack surfaces and provide rapid crisis and cyber incident response, thereby ensuring that clients can be ready for, respond to, and recover from business disruptions. Examples of work include Operational Resilience, Crisis & Incident Response, and Security Operations Center Transformation.

Location: Bengaluru, Hyderabad, Pune, Chennai

Shift Timings: General

Qualifications

Required:

• 6-10 years of experience in cybersecurity, including hands-on experience in at least two of the following: penetration testing, red teaming, phishing, threat management, or adversary simulation
• Experience using offensive security tools such as Nmap, Metasploit, or Cobalt Strike
• Experience with networking protocols, including Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), and Hypertext Transfer Protocol (HTTP)
• Experience with cybersecurity frameworks and standards such as Open Worldwide Application Security Project (OWASP), Center for Internet Security (CIS), National Institute of Standards and Technology (NIST), or ISO/IEC 17799
• Experience with scripting in Python, PowerShell, or Bash for automation or custom tooling
• Experience conducting vulnerability discovery, threat analysis, remediation tracking, and security reporting
• Bachelor’s degree in Computer Science or equivalent experience
• Certified Ethical Hacker (CEH), CompTIA Security+, and at least one advanced certification such as Offensive Security Certified Professional (OSCP) or Offensive Security Wireless Professional (OSWP)

Preferred:

• Experience in additional adversarial domains such as mobile testing, DevSecOps vulnerability management, or advanced red teaming
• Experience with command-and-control or lateral movement tools such as Cobalt Strike or Havoc
• Experience using reverse engineering tools such as IDA Pro or GhidraExperience producing post-engagement reports and detection or response recommendations
• Experience integrating threat feeds, asset inventories, and control frameworks into security assessments
• Experience mentoring junior practitioners or supporting purple team exercises