Deloitte Shared Services India
Walk-in || Vulnerability Management and Penetration testing- Consultant, AM
Vulnerability management and penetration testing consultant at Deloitte's shared services in Bengaluru: the person triages, validates and drives remediation of vulnerabilities using Wiz and Qualys (VMDR/WAS), runs pen testing with tools like Burp Suite, Kali Linux and Metasploit, and builds automation/reporting scripts in Python or Shell across cloud and Kubernetes environments.
- Compensation
- Not disclosed
- Location
- Bengaluru
- Work setup
- Onsite
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 2-8 years of experience in the Cybersecurity domain (Vulnerability Management and Penetration Testing)
- Perform vulnerability triage, validation, risk assessment, remediation tracking, and closure management using Wiz, Wiz Red Agent, Qualys VMDR, and Qualys WAS
- Develop automation scripts, reporting dashboards, and operational workflows for vulnerability visibility and prioritization
- Strong understanding of Cloud Security and Container Security (cloud-native environments, containerized workloads, Kubernetes, internet-facing services)
- Experience with VM/pen-testing tools: Burp Suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify, Tenable WAS, Tenable.sc, VMDR
- Basic scripting skills: Shell, Python, PERL
Nice to have
- Certifications: OSCP, CRTA/CRTP, OSWE, GWAPT, eWPT/eWPTX, PNPT, CREST, eJPT, CEH
- CISSP (preferred for leadership positions)
Full description
- Total 2-8 years of experience in Cyber security domain Vulnerability Management and Penetration testing.
- Perform vulnerability triage, validation, risk assessment, remediation tracking, and closure management using Wiz, Wiz Red Agent, Qualys VMDR, and Qualys WAS.
- Lead vulnerability reduction activities under the Mythos Readiness Program, focusing on the identification and remediation of vulnerabilities.
- Develop and maintain automation scripts, reporting dashboards, and operational workflows to improve vulnerability visibility, prioritization, and program reporting.
- Leverage strong understanding of Cloud Security and Container Security to assess risks across cloud-native environments, containerized workloads, Kubernetes platforms, and internet-facing services.
- Provide actionable remediation recommendations to application, infrastructure, cloud, and platform teams, ensuring timely mitigation of critical security exposures.
- Manage client and stakeholder communications, including status reporting, risk discussions, remediation reviews, and escalation management.
- Operate effectively in a fast-paced environment with strict remediation timelines, driving adherence to P0 remediation SLAs and rapid issue resolution.
- Coordinate immediate validation and rescan activities following remediation and work closely with engineering teams to confirm risk closure and maintain an accurate security posture.
- Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc. Tenable WAS, Tenable.sc, VMDR
- Experience in basic scripting such as: Shell, Python, PERL, etc.
Preferred Certifications
- OSCP (Offensive Security Certified Professional)
- CRTA / CRTP
- OSWE (Offensive Security Web Expert)
- GWAPT (GIAC Web Application Penetration Tester)
- eWPT / eWPTX
- PNPT
- CREST Certifications
- CISSP (Preferred for leadership positions)
- eJPT
- CEH