Key Responsibilities:

- Total 7+ years of experience in Cyber security domain
- Understanding of basic business and information technology management processes.
- Valuable knowledge of TCP/ IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
- Experience of Web Application Security Testing, Infrastructure VAPT, API testing.
- Experience on Mobile Security Pen-Testing (iOS and Android).
- Experience on Cloud (AWS & Azure) Configuration and Red Teaming.
- Knowledge of AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.
- Understanding of AI-specific security risks, including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
- Ability to identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend effective remediation measures.
- Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
- Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc.
- Experience in basic scripting such as: Shell, Python, PERL, etc.
- Basic knowledge of Technoilogies such as: IPSEC, SSL, SSH, VPN, Ethernet Token Ring, WAP, SMTP, FTP, Frame Relay, WAN, ATM, FDDI, DSL, ISDN, HP Openview, Sun NetManage, Cisco Works,



Radius, Big Brother, F5.

Additional Skills

- Experience on Source Code Review.
- Experience on Network Security Architecture Review, End Point Security, Product Security.
- Experience in security testing of RAG (Retrieval-Augmented Generation) applications, AI guardrails, model access controls, and AI application integrations.
- Strong knowledge on Malware Analysis, Patch Management, Threat Profiling, Container, Dockers.
- Strong analytical and communication skills (written, verbal and presentation)
- Open to learn new tools and technologies as per the project requirement
- Interactive with team members and confident during client meetings, under the guidance of senior members of the project
- Initiative & drive
- Be deadline-oriented and quality-focused
- Familiarity with industry standards and frameworks such as OWASP, CIS, NIST ISO/IEC 17799, etc.
- Demonstrates basic knowledge of security and privacy controls and risk management processes
- Demonstrates basic knowledge in one or more Cyber Threat Management domains such as: Threat Management, Cyber Operations/Fusion Managed Services, Malware Analysis, Collective Threat Intelligence and Cyber Risk Sciences, Incident Management and Forensics, Data Protection solutions.

Preferred qualifications

- Relevant certifications such as OSCP, CRTP, CEH, eWPT, GPEN, Burp Suite Certified Practitioner, cloud security certifications (AWS/Azure/GCP), or equivalent certifications will be an added advantage.

📌 Walk-in || VAPT Engineer - DM, Manager (Mumbai)
🏢 Deloitte Shared Services India
📍 Mumbai