BENGALURU · FULLTIME
Vulnerability Management and Penetration testing- DM, M
Deloitte
Bengaluru · onsite · Posted 5d ago
Your match
Sign in to see your match score, skill gaps & tailored resume.
Section · 01
About this role
- Total 8+ years of experience in Cyber security domain Vulnerability Management and Penetration testing.
- Lead vulnerability reduction activities under the Mythos Readiness Program, focusing on the identification and remediation of vulnerabilities.
- Perform vulnerability triage, validation, risk assessment, remediation tracking, and closure management using Wiz, Wiz Red Agent, Qualys VMDR, and Qualys WAS, Red Teaming, DevSecops.
- Develop and maintain automation scripts, reporting dashboards, and operational workflows to improve vulnerability visibility, prioritization, and program reporting.
- Leverage strong understanding of Cloud Security and Container Security to assess risks across cloud-native environments, containerized workloads, Kubernetes platforms, and internet-facing services.
- Provide actionable remediation recommendations to application, infrastructure, cloud, and platform teams, ensuring timely mitigation of critical security exposures.
- Manage client and stakeholder communications, including status reporting, risk discussions, remediation reviews, and escalation management.
- Operate effectively in a fast-paced environment with strict remediation timelines, driving adherence to P0 remediation SLAs and rapid issue resolution.
- Coordinate immediate validation and rescan activities following remediation and work closely with engineering teams to confirm risk closure and maintain an accurate security posture.
- Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc. Tenable WAS, Tenable.sc, VMDR
- Experience in basic scripting such as: Shell, Python, PERL, etc.
Preferred Certifications
- OSCP (Offensive Security Certified Professional)
- CRTA / CRTP
- OSWE (Offensive Security Web Expert)
- GWAPT (GIAC Web Application Penetration Tester)
- eWPT / eWPTX
- PNPT
- CREST Certifications
- eJPT
- CISSP (Preferred for leadership positions)
- CEH
Sourced from naukri
Let the agent run this one for you.
Tailored resume, auto-apply, and referral lookup — in under 2 minutes.
Section · 02
Skills
Section · Company
About Deloitte
Deloitte
Management Consulting
120k+
employees
1845
181 years old
Hyderabad, India
US
About
At Deloitte, we help provide high-quality audit & assurance services, consulting, tax, and advisory services to some of the world’s most admired brands. Alongside this work, our Enabling Areas and Global teams support Deloitte’s businesses, helping create impact for clients, communities, and our people. Our professionals help provide measurable and lasting results that could help reinforce public trust in capital markets, enable clients to transform and thrive, and lead the way toward a stronger economy, a more equitable society and a sustainable world. Building on its 180-plus year history, Deloitte spans more than 150 countries and territories.
Deloitte US‑India Offices (USI) is a region within the Deloitte US organization, with offices across seven cities in India: Hyderabad, Mumbai, Gurugram, Bengaluru, Kolkata, Pune, and Chennai.
Industries
Employee ratings
23,234 reviews
Culture
3.6
Career growth
3.1
Work-life
3.2
Employees rate it well for
Find them on