Penetration Testing - Analyst

Summary

Position Summary

Analyst - Penetration Tester (Security Testing) - Deloitte Support Services India Pvt. Ltd.

Are you energized by helping organizations protect their data and build client trust? Do you want to work in one of the world’s largest holistic internal cybersecurity organizations? If you’re interested in proactively preventing, detecting, and responding to cyber-attacks across a complex global footprint, then Deloitte Global could be the perfect place for you. We’re looking for an analytical thinker passionate about cybersecurity to join our team.

Work you’ll do

As part of the Global Cybersecurity team, responsibilities will be to work with customers to deliver technical assessments against a broad range of services, illustrative duties will include:

This role is responsible for providing manual penetration testing services as part of the shared services organization for member firms. Illustrative responsibilities.

• Assisting in technical scoping of security testing activities
• Executing security testing.
• Web Application Penetration Testing
• Web Services / Application Programming Interface (API) Penetration Testing
• Network Penetration Testing
• Mobile Application Penetration Testing
• Thick Client Penetration Testing
• Conducting focused research when not deployed on an active project
• Provide consultative guidance to customers on findings identified in a clear and actionable fashion both in writing and verbally.
• Enhancing and updating testing methodologies, processes and standards documentation
• Maintaining proficiency of knowledge through ongoing training paths
• Proficient at analyzing and understanding complex architecture designs.
• Ability to effectively communicate what services and capabilities our group can facilitate to our clients.
  
  

The team

The Deloitte Global Cybersecurity function is responsible for enhancing data protection, standardizing and securing critical infrastructure, and gaining cyber visibility through security operations centers. The Cybersecurity organization delivers a comprehensive set of security services to Deloitte’s global network of firms around the globe.

Qualifications

• Education (degree): Bachelor’s Degree or equivalent experience
  
  

Skills/abilities :

• Ability to communicate strategic information security topics, policies, and standards as well as risk-related concepts to technical and nontechnical audiences
• Threat modeling experience
• Scripting experience (Power shell, Python)
• Sound knowledge of common infrastructure and web application vulnerabilities and
  
  

common vulnerability categorizations such as OWASP, CVSS Secure DevOps experience

Knowledge of ticketing and tracking tools such as Service Now - Security Operation

Preferred :

• Offensive Certified Security Professional (OSCP)
• Any GIAC Certification (GSEC, GWAB, GPEN, GMOB, GCPN)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM) or Certified Information Systems Auditor (CISA
• OWASP Application Security Top 10
• OWASP API Security Top 10
• OWASP Thick Client Top 10
• MITRE ATT&CK Framework
• Cloud Service testing
• Reverse Engineering
  
  

Our purpose

Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities.

Our people and culture

Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas and perspectives, and bring more creativity and innovation to help solve our clients’ most complex challenges. This makes Deloitte one of the most rewarding places to work.

Professional development

At Deloitte, professionals have the opportunity to work with some of the best and discover what works best for them. Here, we prioritize professional growth, offering diverse learning and networking opportunities to help accelerate careers and enhance leadership skills. Our state-of-the-art DU: The Leadership Center in India, located in Hyderabad, represents a tangible symbol of our commitment to the holistic growth and development of our people. Explore DU: The Leadership Center in India .

Benefits To Help You Thrive

At Deloitte, we know that great people make a great organization. Our comprehensive rewards program helps us deliver a distinctly Deloitte experience that helps that empowers our professionals to thrive mentally, physically, and financially—and live their purpose. To support our professionals and their loved ones, we offer a broad range of benefits. Eligibility requirements may be based on role, tenure, type of employment and/ or other criteria. Learn more about what working at Deloitte can mean for you.

Recruiting tips

From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.

Requisition code: 305681