Penetration Tester

Deloitte India's Cyber Risk practice is looking for a skilled Penetration Tester to perform security assessments for clients in banking, insurance, and government sectors. You will simulate real-world attacks to identify vulnerabilities before malicious actors do.

The role involves web application pen testing, network pen testing, mobile app security assessments, and social engineering exercises. You will document findings clearly and present them to client CISOs and technical teams.

• Conduct web application, API, and network penetration tests
• Perform mobile app security assessments (Android and iOS)
• Deliver professional reports with risk-rated findings and remediation guidance

• Execute black-box, grey-box, and white-box penetration tests
• Identify and exploit vulnerabilities in web apps, APIs, and networks
• Write detailed assessment reports with CVSS-rated findings
• Present findings to client security teams and management
• Provide remediation guidance and re-test after fixes

• 3-6 years of offensive security / penetration testing experience
• OSCP, CEH, or equivalent certification is required
• Proficiency with tools like Burp Suite, Metasploit, Nmap, Nessus
• Strong knowledge of OWASP Top 10 and SANS Top 25
• Experience with manual testing techniques, not just automated tools
• Ability to write clear, client-ready reports
• Bug bounty experience is a strong plus