Cyber Penetration Testing Consultant

About the role

Join Deloitte Cyber to help organisations defend against evolving threats through offensive security, threat simulation and resilience services. As a Consultant you will work on large‑scale projects that focus on adversary emulation, vulnerability assessment and security operations improvement.

Key responsibilities

• Support delivery of offensive security and cybersecurity transformation engagements under defined guidelines and SLAs.
• Perform development and customization activities for security and data‑protection technology implementations.
• Execute assigned tasks with general supervision, ensuring timely and accurate client work products.
• Apply Deloitte methodologies, frameworks and tools to client business processes and IT management.
• Contribute to practice development, documentation and engagement coordination.

Required profile

• 3‑6 years of hands‑on cybersecurity experience.
• Experience in at least two of: penetration testing, red teaming, phishing, threat management, adversary simulation.
• Strong knowledge of networking protocols (TCP/IP, DNS, HTTP) and security frameworks (OWASP, CIS, NIST, ISO/IEC 17799).
• Proficiency in scripting languages such as Python, PowerShell or Bash.
• Relevant certifications (CEH, CompTIA Security+, OSCP or OSWP).

Required skills

• Penetration testing and red teaming
• Phishing and threat management
• Adversary simulation
• Nmap, Metasploit, Cobalt Strike
• TCP/IP, DNS, HTTP protocols
• OWASP, CIS, NIST, ISO/IEC 17799 frameworks
• Vulnerability discovery and remediation tracking
• Python, PowerShell, Bash scripting
• Certified Ethical Hacker (CEH)
• CompTIA Security+
• Offensive Security Certified Professional (OSCP) or Offensive Security Wireless Professional (OSWP)