Walk-in | VAPT - DM / Manager

Deloitte Shared Services India; Bengaluru; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Deloitte Shared Services India is seeking a senior cybersecurity leader with extensive experience in managing complex cyber risk programs. The role requires guiding a team across assessment initiatives, client relations, and strategic security planning.

You will lead high-stakes engagements and tailor Deloitte methodologies to client needs. The ideal candidate will demonstrate strong leadership, presales capabilities, and deep knowledge of security frameworks, cloud security, and application

Qualifications

• 8+ years of experience in Cyber security domain.
• Lead Cyber Security Assessment projects and guide the team.
• Demonstrates understanding of complex business and IT management processes.
• Strong client relationship skills and lead for multiple accounts in Cyber Risk Management.
• Experience in presales, client management and conflict management.

Responsibilities

• Manage day-to-day client relationships at appropriate management levels.
• Participate in proposal development to sell add-on work.
• Experience in strategy, maturity assessment, roadmap, and awareness programs.
• Engage with clients, managers and partners to build strong relationships.
• Tailor firm tools and methodologies per client requirements.
• Mentor and provide feedback on performance of others.

Skills

Cybersecurity

Client management

Threat profiling

Presales

Cloud security

Security architecture

Vulnerability assessment

Education

Bachelor's/Master's in Cybersecurity or IT

Tools

Burp Suite

Kali Linux

Nessus

Metasploit

Nmap

AppScan

Job description

Role & responsibilities

• Total 8+ years of experience in Cyber security domain
• Manages Cyber Security Assessment projects, guides the team on a day-to-day basis and ensures that assigned tasks and responsibilities are fulfilled in a timely fashion
• Demonstrates understanding of complex business and information technology management processes
• Plays a lead role in client retention, relationship building, and communication. Act as the lead for multiple client accounts in Cyber Risk Management space.
• Interacts with clients, managers and partners to build and nurture strong relationships
• Tailors firm tools and methodologies as per client requirements
• Evaluates, counsels, mentors and provides feedback on performance of others
• Manages day-to-day client relationships at appropriate management levels
• Participates in proposal development efforts to sell "add-on" work to clients
• Experience in working on multiple Cyber Security Strategy including strategy and program/process development, maturity assessment, roadmap, training and awareness programs.
• Demonstrates understanding of complex business and information technology management processes.
• Interacts with clients, managers and partners to build and nurture strong relationships.
• Tailors firm tools and methodologies as per client requirements.
• Strong experience on presales, client management and conflict management.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing, Mobile Testing (iOS & Android).
• Experience on Cloud (AWS & Azure) Configuration Review and Pentest.
• Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Good Experience in Red Teaming, Thick Client and Source Code Review.
• Experience as an Security Architect, DevSecOPs.
• Experience on End Point Security and Product Security.
• Experience with Vulnerability Management tools: Burp, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.
• Extensive experience in leveraging industry standards and frameworks such as OWASP, CIS, NIST, ISO/IEC 17799, ISO/IEC 27001, etc.

Preferred candidate profile

• Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Strong knowledge on Threat Profiling, Container, Dockers.
• Demonstrates knowledge of one or more industry or functional area
• Demonstrates ability to develop and review technical reports and develop and deliver presentations
• Strong project management skills
• Demonstrates a general knowledge of market trends, competitor activities, firm products and service lines
• Membership and visibility in professional & civic organizations
• Candidates must possess security certification of OSCP, CRTP, eJPT, CRTA, CISM
• Good to have security certification for GPEN, CREST, CISSP.
• Bachelors or Master's degree in Cybersecurity, Information Technology, or related field.

Preferred Certifications

• OSCP (Offensive Security Certified Professional)
• CRTA / CRTP
• OSWE (Offensive Security Web Expert)
• GWAPT (GIAC Web Application Penetration Tester)
• eWPT / eWPTX
• PNPT
• CREST Certifications
• eJPT
• CISSP (Preferred for leadership positions)
• CEH