Walk-in | VAPT Engineer - Consultant, AM

Deloitte Shared Services India; Mumbai; On-site; INR 900,000 - 1,400,000; Full time

Job summary

Deloitte Shared Services India is seeking a cyber security professional with 2+ years of experience to support security testing, vulnerability management, and cloud configurations. You will assess AI-related security risks and contribute to safe, compliant security postures.

Responsibilities include conducting VAPT, API testing, and network reviews, while staying current with OWASP and other industry standards. Strong scripting skills and collaboration with teams are essential.

Qualifications

• 2+ years of experience in cyber security domain.
• Understanding of business and IT management processes.
• Knowledge of TCP/IP, networks including firewall, IDS/IPS, routers, switches.
• Experience in Web App Security Testing, Infrastructure VAPT, API testing.
• Experience in Mobile Security Pen-Testing (iOS and Android).
• Cloud (AWS & Azure) configuration and red teaming.
• Knowledge of AI/LLM security testing for Gen AI apps and AI-powered chatbots.
• Understanding AI security risks aligned with OWASP Top 10 for LLM.
• Identify vulnerabilities and remediation recommendations.
• Vulnerability management and penetration testing tools experience.
• Scripting basics: Shell, Python, PERL.
• Knowledge of tech: IPSEC, SSL, SSH, VPN, etc.
• Familiarity with standards like OWASP, CIS, NIST ISO/IEC 17799.

Responsibilities

• Total 2+ years of experience in cyber security domain.
• Understand basic business and IT management processes.
• Knowledge of TCP/IP and networks including firewall, IDS/IPS, routers, switches.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
• Experience on Mobile Security Pen-Testing (iOS and Android).
• Experience on Cloud (AWS & Azure) configuration and red teaming.
• Knowledge of AI/LLM security testing for Generative AI apps and AI-powered chatbots.
• Understanding AI-specific security risks, aligned with OWASP Top 10 for LLM Applications.
• Ability to identify vulnerabilities, assess exploitation, and remediation measures.
• Experience in firewall and network device configuration reviews and server OS reviews.
• Experience with vulnerability management and pen-testing tools.
• Basic scripting: Shell, Python, PERL.
• Familiarity with OWASP, CIS, NIST frameworks.
• Knowledge in Cyber Threat Management domains.

Skills

Cyber security

TCP/IP & networks

Firewall/IDS/IPS

Web app security testing

Mobile security testing

Cloud (AWS & Azure)

Red teaming

AI/LLM security testing

OWASP Top 10 for LLM

Vulnerability management

Shell scripting

Python

PERL

IPSEC/SSL/SSH/VPN

Tools

Burp Suite

Kali Linux

Acunetix

AppScan

Nexpose

Qualys Guard

Nessus

Nmap

Metasploit

Fortify

Job description

Key Responsibilities:

• Total 2+ years of experience in Cyber security domain
• Understanding of basic business and information technology management processes.
• Good knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
• Experience on Mobile Security Pen-Testing (iOS and Android).
• Experience on Cloud (AWS & Azure) Configuration and Red Teaming.
• Knowledge of AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.
• Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
• Ability to identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend effective remediation measures.
• Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
• Experience in basic scripting such as: Shell, Python, PERL, etc.
• Basic knowledge of Technoilogies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works, Radius, Big Brother, F5.

Additional Skills

• Experience on Source Code Review.
• Experience on Network Security Architecture Review, End Point Security, Product Security.
• Experience in security testing of RAG (Retrieval-Augmented Generation) applications, AI guardrails, model access controls, and AI application integrations.
• Strong knowledge on Malware Analysis, Patch Management, Threat Profiling, Container, Dockers.
• Strong analytical and communication skills (written, verbal and presentation)
• Open to learn new tools and technologies as per the project requirement
• Interactive with team members and confident during client meetings, under the guidance of senior members of the project
• Initiative & drive
• Be deadline-oriented and quality-focused
• Familiarity with industry standards and frameworks such as OWASP, CIS, NIST ISO/IEC 17799, etc.
• Demonstrates basic knowledge of security and privacy controls and risk management processes
• Demonstrates basic knowledge in one or more Cyber Threat Management domains such as: Threat Management, Cyber Operations/Fusion Managed Services, Malware Analysis, Collective Threat Intelligence and Cyber Risk Sciences, Incident Management and Forensics, Data Protection solutions.

Preferred qualifications

• Relevant certifications such as OSCP, CRTP, CEH, eWPT, GPEN, Burp Suite Certified Practitioner, cloud security certifications (AWS/Azure/GCP), or equivalent certifications will be an added advantage.