T&T | Cyber: D&R | Manager | Vulnerability Assessment & Penetration Testing (VAPT) | Bengaluru

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Deloitte & Touche GmbH Wirtschaftsprüfungsgesellschaft seeks a senior Cyber Security lead with 9-15 years of experience in Bengaluru. You will manage security assessment projects, guide delivery, and maintain strong client relationships across risk management engagements.

Responsibilities include presales support, tailored methodologies, and oversight of vulnerability management, threat modeling, and code reviews. A bachelor’s/master’s in IT/cybersecurity is required.

Qualifications

• Bachelor’s or Master’s degree in Cybersecurity or IT.
• Security certifications such as OSCP, CRTP, eJPT, CRTA, CISM preferred.
• Experience leading multiple cyber security strategy engagements and programs.
• Hands-on familiarity with vulnerability management and security testing tools.

Responsibilities

• Total 9-15 years of experience in Cyber security domain.
• Manages Cyber Security Assessment projects, guides the team day-to-day, and ensures timely delivery.
• Leads client retention, relationship building and communication for multiple accounts.
• Interacts with clients, managers and partners to build and nurture relationships.
• Tailors firm tools and methodologies per client requirements.
• Strong experience in presales, client management and conflict management.
• Experience in Web App Security Testing, Infrastructure VAPT, API testing, and Mobile Testing.
• Experience with Cloud (AWS & Azure) configuration review and pentest.
• Experience in End Point Security and Product Security.
• Proficient with Vulnerability Management tools (Burp, Nessus, etc.).

Skills

Presales

Client management

Conflict management

Web app security testing

Infrastructure VAPT

API testing

Mobile testing

Cloud review

Pentest

End point security

Product security

Scripting

Threat profiling

Docker/Kubernetes

Education

Bachelor’s or Master’s degree in Cybersecurity/IT

Tools

Burp Suite

Kali Linux

Acunetix

AppScan

Nexpose

Qualys Guard

Nessus

Nmap

Metasploit

Fortify

Job description

Select how often (in days) to receive an alert:

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks.Learn moreabout Cybersecurity

• Evaluates, counsels, mentors and provides feedback on performance of others
• Assist in retention of people and lead training efforts
• Contributes to sales process by participating and/or leading proposal development efforts to sell "add-on" work to client and participate in the client presentation/orals
• Identifies additional opportunities for the existing clients and opportunities for cross selling across service lines
• Play substantive/lead role in engagement planning, economics, and billing
• Demonstrates a general knowledge of market trends, competitor activities, firm products and service lines
• Experience in leading multiple client engagements in multiple Cyber Security Management domains
• Experience in leading and executing multiple Cyber Security Strategy engagements and building Cyber Threat and Vulnerability management programs for organizations
• Cyber Threat, Vulnerability and Risk Assessment - Ability to identify business implications and identifying tactical and strategic recommendations to mitigate the risk.
• Experience in managing multiple Cyber Threat Management projects including technical and strategy projects.
• Substantial experience in architecting technology solutions in the Cyber Security Management space
• Ability to define the business & technical scope of a project.Should be able to independently lead delivery teams to deliver projects according to client specifications after such scope is defined
• Experience in managing multiple projects covering the full life cycle of project management starting from proposal, orals presentation, project planning and management, deliverables review, final client presentation and project closure.
• Extensive experience in leveraging industry standards and frameworks such as OWASP, CIS, NIST, ISO/IEC 17799, ISO/IEC 27001, etc.
• Experience in operationalizing the solutions implemented (e.g. ArcSight Implementation experience and operationalizing Security Monitoring and Security Operations post Implementation)
• People and practice management skills
• Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.
• Basic knowledge of Technoilogies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, F5.

Key Responsibilities:

• Total 9-15 years of experience in Cyber security domain
• Manages Cyber Security Assessment projects, guides the team on a day-to-day basis and ensures that assigned tasks and responsibilities are fulfilled in a timely fashion
• Demonstrates understanding of complex business and information technology management processes
• Plays a lead role in client retention, relationship building, and communication. Act as the lead for multiple client accounts in Cyber Risk Management space.
• Interacts with clients, managers and partners to build and nurture strong relationships
• Tailors firm tools and methodologies as per client requirements
• Evaluates, counsels, mentors and provides feedback on performance of others
• Participates in proposal development efforts to sell "add-on" work to clients
• Experience in working on multiple Cyber Security Strategy including strategy and program/process development, maturity assessment, roadmap, training and awareness programs.
• Demonstrates understanding of complex business and information technology management processes.
• Interacts with clients, managers and partners to build and nurture strong relationships.
• Tailors firm tools and methodologies as per client requirements.
• Strong experience onpresales, client management and conflict management.
• Experienceof Web Application Security Testing, Infrastructure VAPT, API testing, Mobile Testing (iOS & Android).
• Experience onCloud (AWS & Azure) Configuration Review and Pentest.
• Experience inconducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Good Experience inRed Teaming, Thick Client and Source Code Review.
• Experience as anSecurity Architect, DevSecOPs.
• Experience onEnd Point Security and Product Security.
• Experience with Vulnerability Management tools: Burp, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as:Shell, Python, PERL, etc.
• Extensive experience in leveraging industry standards and frameworks such asOWASP, CIS, NIST, ISO/IEC 17799, ISO/IEC 27001, etc.
• Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Strong knowledge on Threat Profiling, Container, Dockers.
• Demonstrates knowledge of one or more industry or functional area
• Demonstrates ability to develop and review technical reports and develop and deliver presentations
• Demonstrates a general knowledge of market trends, competitor activities, firm products and service lines
• Membership and visibility in professional & civic organizations
• Candidates must possess security certification of OSCP, CRTP, eJPT, CRTA, CISM
• Good to have security certification for GPEN, CREST, CISSP.
• Bachelor’s or Master's degree in Cybersecurity, Information Technology, or related field.