Pen Testing - Consultant

Summary

Position Summary

Deloitte Cyber understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful insights to help our clients navigate the evolving threat landscape and technology environment as we partner with clients to transform their businesses.

Work you'll do

As a Consultant on the Cyber Defense & Resilience team, you will help clients identify, validate, and remediate security vulnerabilities across applications, APIs, mobile platforms, infrastructure, and cloud environments.

• Conduct manual and tool-assisted penetration testing across web, API, mobile, thick-client, infrastructure, and cloud environments.
• Identify, validate, and document vulnerabilities, attack paths, business impact, and remediation actions using approved testing methodologies.
• Assess application and API security controls, including authentication, authorization, session management, input validation, and configuration settings.
• Prepare client-ready deliverables and participate in technical walkthroughs, remediation discussions, status updates, and knowledge-transfer sessions.
• Contribute to practice development through reusable testing procedures, knowledge assets, and lessons learned while adhering to Deloitte security and operational requirements.
  
  

The team

Cyber Defense & Resilience teams assist clients in identifying, prioritizing, and remediating vulnerabilities across their digital ecosystem. The teams support a broad range of security capabilities, including application security, penetration testing, mobile security, infrastructure security, cloud security, vulnerability management, attack surface management, threat management, and red and purple team assessments. By continuously assessing applications, APIs, cloud assets, networks, endpoints, and mobile platforms, the team helps clients identify potential exposure points before threat actors can exploit them. Penetration testing and application security are foundational capabilities within the Cyber Defense & Resilience portfolio, enabling clients to understand real-world attack paths, improve defensive controls, and strengthen their overall security posture.

Location: Bengaluru/Hyderabad/Pune/Chennai

Shift Timings: General

Qualifications

Required:

• 3-5 years of experience in penetration testing, application security, vulnerability assessment, or information security.
• 3+ years of hands-on experience in one or more of the following: web application security, API security, mobile application security, thick-client security, infrastructure security, or vulnerability management.
• Experience using penetration testing tools such as Burp Suite, OWASP Zed Attack Proxy, Fiddler, Wireshark, Nmap, Metasploit, or Postman.
• Knowledge of Open Worldwide Application Security Project Top 10, Common Vulnerabilities and Exposures, Common Vulnerability Scoring System, Common Weakness Enumeration, and common application security vulnerabilities.
• Knowledge of Hypertext Transfer Protocol, Transport Layer Security, Domain Name System, Transmission Control Protocol/Internet Protocol, OAuth 2.0, OpenID Connect, and JSON Web Token.
• One of the following certifications: Certified Ethical Hacker, CompTIA Security+, or Certified Information Systems Security Professional.
• Bachelor's degree in Computer Science or equivalent experience.
  
  

Preferred:

• Experience with cloud, container, microservices, or mobile security assessments.
• Experience performing secure code reviews or threat modeling.
• Experience with Python, PowerShell, Bash, or other scripting languages used for security testing or automation.
• Experience with Amazon Web Services, Microsoft Azure, or Google Cloud security assessments.
• Experience with tools used for mobile application or reverse engineering assessments.
• Industry certifications such as Offensive Security Certified Professional, Offensive Security Web Expert, GIAC, or CREST.
  
  

Our purpose

Deloitte's purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 362810