Role & responsibilities

- Total 2-7 years of experience in Cyber security domain

- Understanding of basic business and information technology management processes.

- Positive knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.

- Experience of Web Application Security Testing, Infrastructure VAPT, API testing.

- Knowledge of AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.

- Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.

- Experience in security testing of RAG (Retrieval-Augmented Generation) applications, AI guardrails, model access controls, and AI application integrations.

- Experience on Mobile Security Pen-Testing (iOS and Android).

- Experience on Cloud (AWS & Azure) Configuration and Red Teaming.





- Ability to identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend effective remediation measures.

- Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.

- Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.

- Experience in basic scripting such as: Shell, Python, PERL, etc.

Preferred Certifications

- OSCP (Offensive Security Certified Skilled)

- CRTA / CRTP

- OSWE (Offensive Security Web Expert)

- GWAPT (GIAC Web Application Penetration Tester)

- eWPT / eWPTX

- PNPT

- CREST Certifications
- eJPT

- CISSP (Preferred for leadership positions)

- CEH

📌 Walk-in || VAPT - Consultant / AM (Bengaluru)
🏢 Deloitte Shared Services India
📍 Bengaluru