Deputy Manager – VAPT & Red Teaming | Deloitte Mumbai
Job Description
Summary
Deloitte India is seeking an experienced Deputy Manager – VAPT & Red Teaming in Mumbai to strengthen cybersecurity defense for BFSI clients. The role focuses on penetration testing, red teaming, vulnerability assessments, and offensive security operations. The ideal candidate will have strong expertise in MITRE ATT&CK, OSCP/CRTP certifications, and advanced cyber attack simulations. This position offers the opportunity to drive cyber resilience, improve detection and response, and deliver strategic security insights across complex enterprise environments.
Job Details at a Glance
| Job Title | Deputy Manager – VAPT & Red Teaming |
|---|---|
| Location | Mumbai, India |
| Designation | Deputy Manager |
| Entity | Deloitte Touche Tohmatsu India LLP |
| Experience Required | 5–8 years in offensive security / red teaming |
| Industry | BFSI |
| Certifications | OSCP, CRTP, or equivalent |
| Tools/Platforms | Cymulate, Pycus, CART/BAS platforms |
| Education | B.E / B.Tech in Computer Science / IT or related fields |
| Work Mode | On-site, Full-time |
Key Responsibilities
Red Teaming & Offensive Security
- Plan and execute Red Team engagements simulating realistic external, internal, and physical threat scenarios.
- Conduct assumed breach assessments, lateral movement, privilege escalation, and data exfiltration exercises.
- Exploit vulnerabilities in Active Directory, cloud environments, and enterprise infrastructure.
- Leverage MITRE ATT&CK framework to design threat scenarios and map findings.
- Integrate CART/BAS tools like Cymulate or Pycus to automate attack simulations.
Vulnerability Assessment & Threat Intelligence
- Conduct penetration tests and vulnerability assessments across enterprise systems.
- Analyze threats, emerging attack techniques, and security gaps.
- Collaborate with Blue Teams to evaluate detection, prevention, and response effectiveness.
Reporting & Stakeholder Management
- Develop comprehensive reports with actionable remediation recommendations.
- Present findings to technical and executive stakeholders.
- Support security awareness, tabletop exercises, and purple teaming initiatives.
Skills & Qualifications
- Experience: 5–8 years in offensive security, penetration testing, or red teaming.
- Proficiency in TTPs for Red Team operations, including phishing, C2 infrastructure, evasion, and data exfiltration.
- Expertise in Windows internals, Active Directory attacks, cloud security, and network protocols.
- Familiarity with Cobalt Strike, Metasploit, Empire, Covenant, or equivalent tools.
- Hands-on knowledge of physical security assessments and social engineering (preferred).
- Strong analytical, problem-solving, and communication skills for cross-functional collaboration.
Preferred Qualifications
- Offensive security certifications: OSCP, CRTP, or equivalent.
- Prior experience in BFSI sector cybersecurity engagements.
- Knowledge of regulatory compliance frameworks (RBI, SEBI, ISO 27001).
Career Growth & Development
- Participate in global cybersecurity initiatives and cross-functional engagements.
- Access Deloitte University programs for leadership, technical, and professional skill development.
- Gain exposure to strategic security planning, advanced threat simulations, and risk management.
- Opportunity to mentor junior security professionals and lead client-focused security projects.
Apply Now
Take the next step in your career as Deputy Manager – VAPT & Red Teaming, Mumbai.
👉 Apply directly on Deloitte Careers