Walk-in | VAPT - Consultant / AM

Deloitte Shared Services India; Bengaluru; Sur place; INR 900 000 - 1 500 000; Plein temps

Résumé du poste

Deloitte Shared Services India is seeking a cybersecurity specialist with 2–7 years of experience to lead security testing across web apps, infrastructure, API, and cloud configurations. You will assess AI/LLM risks and design effective remediation strategies.

Key focus areas include AI security, RAG testing, mobile security, and threat modeling, with hands-on use of Burp Suite, Kali Linux, and common pentest tools. Collaborate with cross-functional teams to strengthen security controls.

Qualifications

• 2–7 years of experience in cybersecurity domain.
• Understanding of basic business and information technology management processes.
• Knowledge of TCP/IP and networks including Firewall, IDS/IPS, routers, switches, and network architecture.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
• Knowledge of AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.
• Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
• Experience in security testing of RAG applications, AI guardrails, model access controls, and AI application integrations.
• Experience on Mobile Security Pen-Testing (iOS and Android).
• Experience on Cloud (AWS & Azure) Configuration and Red Teaming.
• Ability to identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend effective remediation measures.
• Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.

Responsabilités

• Carry out security testing across web apps, infrastructure, APIs, and cloud configurations.
• Assess and remediate AI/LLM security risks including prompt injection and governance gaps.
• Test AI/LLM integrations and RAG workflows for vulnerabilities and policy gaps.
• Perform mobile security testing for iOS and Android platforms.
• Conduct cloud security reviews (AWS/Azure) and red team simulations.
• Review firewall and network device configurations and system hardening across Windows, Linux, UNIX, Solaris, databases.
• Utilize tools like Burp Suite, Kali Linux, Acunetix, Nessus and others for comprehensive assessments.
• Develop remediation recommendations and work with teams to implement fixes.
• Script basic tooling (Shell, Python, PERL) to automate repeatable tests.

Connaissances

TCP/IP networks

Firewall/IDS/IPS

Web application security testing

Infrastructure VAPT

API testing

AI/LLM security testing

AI/LLM risk awareness

RAG security testing

Mobile security testing

Cloud security (AWS & Azure)

Red Teaming

Basic scripting (Shell, Python, PERL)

Outils

Burp Suite

Kali Linux

Acunetix

AppScan

Nexpose

Qualys Guard

Nessus

Nmap

Metasploit

Fortify

Description du poste

Role & responsibilities

• Total 2-7 years of experience in Cyber security domain
• Understanding of basic business and information technology management processes.
• Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
• Knowledge of AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.
• Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
• Experience in security testing of RAG (Retrieval-Augmented Generation) applications, AI guardrails, model access controls, and AI application integrations.
• Experience on Mobile Security Pen-Testing (iOS and Android).
• Experience on Cloud (AWS & Azure) Configuration and Red Teaming.
• Ability to identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend effective remediation measures.
• Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.

Preferred Certifications

• OSCP (Offensive Security Certified Professional)
• CRTA / CRTP
• OSWE (Offensive Security Web Expert)
• GWAPT (GIAC Web Application Penetration Tester)
• eWPT / eWPTX
• PNPT
• CREST Certifications
• eJPT
• CISSP (Preferred for leadership positions)
• CEH