Walk-in || Vulnerability Management and Penetration testing- Consultant, AM
Posted Updated
Deloitte Shared Services India Walk-in || Vulnerability Management and Penetration testing- Consultant, AM
Summary
Vulnerability management and penetration testing consultant at Deloitte's shared services in Bengaluru: the person triages, validates and drives remediation of vulnerabilities using Wiz and Qualys (VMDR/WAS), runs pen testing with tools like Burp Suite, Kali Linux and Metasploit, and builds automation/reporting scripts in Python or Shell across cloud and Kubernetes environments.
- Total 2-8 years of experience in Cyber security domain Vulnerability Management and Penetration testing.
- Perform vulnerability triage, validation, risk assessment, remediation tracking, and closure management using Wiz, Wiz Red Agent, Qualys VMDR, and Qualys WAS.
- Lead vulnerability reduction activities under the Mythos Readiness Program, focusing on the identification and remediation of vulnerabilities.
- Develop and maintain automation scripts, reporting dashboards, and operational workflows to improve vulnerability visibility, prioritization, and program reporting.
- Leverage strong understanding of Cloud Security and Container Security to assess risks across cloud-native environments, containerized workloads, Kubernetes platforms, and internet-facing services.
- Provide actionable remediation recommendations to application, infrastructure, cloud, and platform teams, ensuring timely mitigation of critical security exposures.
- Manage client and stakeholder communications, including status reporting, risk discussions, remediation reviews, and escalation management.
- Operate effectively in a fast-paced environment with strict remediation timelines, driving adherence to P0 remediation SLAs and rapid issue resolution.
- Coordinate immediate validation and rescan activities following remediation and work closely with engineering teams to confirm risk closure and maintain an accurate security posture.
- Experience with Vulnerability Management and Penetration testing tools: Burp suite, Kali Linux, Acunetix, AppScan, Nexpose, Qualys Guard, Nessus, Nmap, Metasploit, Fortify etc. Tenable WAS, Tenable.sc, VMDR
- Experience in basic scripting such as: Shell, Python, PERL, etc.
Preferred Certifications
- OSCP (Offensive Security Certified Professional)
- CRTA / CRTP
- OSWE (Offensive Security Web Expert)
- GWAPT (GIAC Web Application Penetration Tester)
- eWPT / eWPTX
- PNPT
- CREST Certifications
- CISSP (Preferred for leadership positions)
- eJPT
- CEH