VAPT - Web Application Security | Manager- Deloitte

Role & responsibilities

• Manages multiple cyber risk services projects - escalation point for engagement delivery issues
• Demonstrates understanding of complex business and information technology management processes
• Plays a lead role in client retention, relationship building, and communication. Act as the lead for multiple client accounts in Cyber Risk Management space.
• Tailors firm tools and methodologies as per client requirements.
• Experience of Web Application Security Testing, Infrastructure VAPT, API testing, Mobile Testing (iOS & Android).
• Experience on Cloud (AWS & Azure) Configuration and Pentest.
• Experience in conducting Firewall and Network Devices Configuration Review and configuration reviews of Windows, Linux, UNIX, Solaris, Databases, etc.
• Good Experience in Red Teaming and Thick Client and Source Code Review.
• Hands on experience on DevSecOps.
• Experience as an Security Architect.
• Experience on End Point Security and Product Security.
• Experience on Network Security Architecture Review.
• Strong knowledge on Malware Analysis and Patch Management.
• Strong experience on presales, client management and conflict management.
• Should have large engagement execution experience.
• Evaluates, counsels, mentors and provides feedback on performance of others
• Assist in retention of people and lead training efforts
• Manages day-to-day client relationships at appropriate senior management levels
• Contributes to sales process by participating and/or leading proposal development efforts to sell "add-on" work to client and participate in the client presentation/orals
• Identifies additional opportunities for the existing clients and opportunities for cross selling across service lines
• Play substantive/lead role in engagement planning, economics, and billing
• Demonstrates a general knowledge of market trends, competitor activities, firm products and service lines
• Experience in leading multiple client engagements in multiple Cyber Security Management domains
• Experience in leading and executing multiple Cyber Security Strategy engagements and building Cyber Threat and Vulnerability management programs for organizations
• Cyber Threat, Vulnerability and Risk Assessment - Ability to identify business implications and identifying tactical and strategic recommendations to mitigate the risk.
• Experience in managing multiple Cyber Threat Management projects including technical and strategy projects.
• Substantial experience in architecting technology solutions in the Cyber Security Management space
• Ability to define the business & technical scope of a project. Should be able to independently lead delivery teams to deliver projects according to client specifications after such scope is defined
• Experience in managing multiple projects covering the full life cycle of project management starting from proposal, orals presentation, project planning and management, deliverables review, final client presentation and project closure.
• Emerging Technologies - Eminence initiatives to industry like IoT, Cloud Security, Mobile Security, Data Analytics, Cyber Forensics, Cyber Risk Sciences etc.
• Extensive experience in leveraging industry standards and frameworks such as OWASP, CIS, NIST, ISO/IEC 17799, ISO/IEC 27001, etc.
• Experience in operationalizing the solutions implemented (e.g. ArcSight Implementation experience and operationalizing Security Monitoring and Security Operations post Implementation)
• People and practice management skill

Desired qualifications

• Candidates must possess at least one or more security certifications viz. OSCP, LPT, GPEN.
• Good to have security certification for GPEN, CREST, CISSP.
• B.Tech/M.Tech/MS