Cyber Consultant - ASM Vulnerability Management - Patching

Deloitte • Tampa, FL

166d • $82,600 - $162,800

About The Position

Help organizations reduce cyber risk and improve resilience as part of Deloitte’s Cyber Defense & Resilience Continuous Threat Exposure Management (CTEM) team. Support clients in identifying, prioritizing, and remediating security exposures across complex technology environments. Work with cross-functional stakeholders to strengthen vulnerability management and patching processes, improve visibility into risk, and support cyber transformation initiatives.

The role involves vulnerability remediation and patching across infrastructure, middleware, and applications, using exposure data, asset criticality, exploitability, and attack paths to prioritize remediation. It also supports exception management, reporting, and process improvements, and produces client-facing analyses, dashboards, and status updates to track remediation progress and exposure reduction. The position also includes identifying and documenting exposure and risk considerations from AI and large language model deployments, including AI-specific attack surface and data exposure.

The position is available in 25 listed U.S. locations. Recruiting for this role ends on 05/31/2027. Average travel is 50%, depending on the work and clients served. The estimated salary range is $82,600 to $162,800, with possible eligibility for a discretionary annual incentive program. Limited immigration sponsorship may be available.

Requirements

• At least 3 years of experience in one or more of information technology, information security, vulnerability management, or patch management.
• Experience performing vulnerability remediation, patch management, or continuous threat exposure management, including remediating vulnerabilities across Linux, Windows, middleware, and applications.
• Experience using one or more of BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys; PowerShell, Bash, Python, Ansible, Terraform, or JavaScript Object Notation for automation, scripting, or configuration; and ServiceNow or an IT service management platform to coordinate remediation and track status.
• Hold a vendor-specific credential or documented proof of training completion, including Qualys Certified Specialist, Tenable Vulnerability Management Expert, Rapid7 InsightIDR Certified Specialist, or Wiz Defend Fundamentals.
• Experience identifying or documenting risk considerations for AI and Frontier AI in vulnerability and exposure management, including prompt injection, data poisoning, model supply chain risk, AI-specific attack surface, and data exposure.
• Experience using AI tools to triage, prioritize, create scripts, or integrate with other cybersecurity tools.
• Ability to travel an average of 50%, depending on the work and clients served.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead and support projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines and provide clear guidance to others.

Nice To Haves

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or Information Technology.
• Experience in a consulting environment.
• Experience creating or developing AI agents.
• Experience preparing remediation metrics, dashboards, or status reporting and supporting automation or orchestration of remediation workflows.
• Experience with one or more of the National Institute of Standards and Technology Cybersecurity Framework, Center for Internet Security, International Organization for Standardization 27001, or Cloud Security Alliance Cloud Controls Matrix.
• Possession of one or more vendor-specific cybersecurity credentials, including CompTIA Network+, CompTIA Security+, or Qualys Certified Specialist.

Responsibilities

• Support vulnerability remediation and patching activities aligned to CTEM priorities.
• Execute vulnerability and patch management tasks across infrastructure, middleware, and applications.
• Analyze exposure data, asset criticality, exploitability, and attack paths to help prioritize remediation activities.
• Assist with exception management, reporting, and process improvement efforts that reduce cyber risk.
• Prepare client-facing analyses, dashboards, and status updates to track remediation progress and exposure reduction.
• Assist with identifying and documenting exposure and risk considerations introduced by AI and large language model deployments, including AI-specific attack surface and data exposure.

Benefits

• Possible eligibility for a discretionary annual incentive program.
• Professional development opportunities, including on-the-job learning, formal development programs, leadership opportunities, and mentorship.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed