Consultant / AM

About the Role

Walk-in for VAPT - Consultant / AM at Deloitte Shared Services India.

Key Responsibilities

• Perform Web Application Security Testing, Infrastructure VAPT, and API testing.
• Conduct AI/LLM penetration testing for Generative AI applications, AI-powered chatbots, and LLM-integrated solutions.
• Understand AI-specific security risks including Prompt Injection, Jailbreaking, Sensitive Information Disclosure, Insecure Output Handling, and excessive agency, aligned with OWASP Top 10 for LLM Applications.
• Test RAG (Retrieval-Augmented Generation) applications, AI guardrails, model access controls, and AI application integrations.
• Perform Mobile Security Pen-Testing (iOS and Android).
• Conduct Cloud (AWS & Azure) Configuration and Red Teaming.
• Identify and validate AI security vulnerabilities, assess potential exploitation scenarios, and recommend remediation measures.
• Conduct Firewall and Network Devices Configuration Review.
• Perform configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Engage in Vulnerability Management and Penetration testing.

Requirements & Tech Stack

• Good knowledge of TCP/IP and Networks including Firewall, IDS/IPS, Routers, Switches, and network architecture.
• Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify.
• Experience in basic scripting such as: Shell, Python, PERL.

Qualifications

• Understanding of basic business and information technology management processes.
• Preferred Certifications:
• OSCP (Offensive Security Certified Professional)
• CRTA / CRTP
• OSWE (Offensive Security Web Expert)
• GWAPT (GIAC Web Application Penetration Tester)
• eWPT / eWPTX
• PNPT
• CREST Certifications
• eJPT
• CISSP (Preferred for leadership positions)
• CEH