Cyber Manager - ASM Vulnerability Management - Patching

Deloitte • Jersey City, NJ

166d • $134,500 - $265,100

About The Position

Deloitte & Touche LLP is hiring a Cyber Manager for its Cyber Defense & Resilience Continuous Threat Exposure Management (CTEM) team. The role supports clients in identifying, assessing, and reducing their attack surface, strengthening security, and improving cyber resilience. The manager leads exposure-based remediation and patching across infrastructure, middleware, and applications, aligning work to CTEM priorities and client business and security goals. The position also includes advising on exposure and risk introduced by AI and large language model deployments, including AI-specific attack surfaces, data exposure, and model and supply chain risks. Recruiting for this role ends on 03/31/2027. The role requires an average of 50% travel and is available in multiple U.S. locations. The stated salary range is $134,500 to $265,100, with possible eligibility for a discretionary annual incentive program.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field.
• 10+ years of experience in information technology, information security, or both, including leading and executing vulnerability management, patch management, or CTEM remediation programs.
• Hands-on experience remediating vulnerabilities and executing patch management across Linux, Windows, middleware, and applications using one or more of BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys.
• Experience automating remediation workflows using PowerShell, Bash, Python, JSON, Ansible, Terraform, or a combination of these.
• Hands-on experience using and configuring IT service management or configuration management database platforms, such as ServiceNow, to coordinate remediation and report exposure reduction.
• Experience with risk-based vulnerability prioritization that considers exploitability, asset criticality, and business risk in addition to severity scores.
• Experience leading or supporting the maturation of client attack surface management processes, tooling, and reporting.
• Experience assessing AI and Frontier AI risks, including prompt injection, data poisoning, and model supply chain risk, and applying them to exposure management programs.
• At least one of the following certifications: CISSP, CEH, OSCP, a GIAC certification, or Qualys Certified Specialist.
• Experience supporting sales pursuits, RFP responses, and solution development for cyber managed services engagements; translating technical security findings into client recommendations and status updates; mentoring junior team members; and coordinating a project team or workstream.
• Ability to travel 50%, on average, based on client and industry needs.
• Must be legally authorized to work in the United States without employer sponsorship now or in the future.
• Ability to work independently and collaboratively; communicate effectively in writing and verbally; maintain attention to detail and quality; build professional relationships; lead projects or workstreams; manage competing tasks in a fast-paced environment; demonstrate professionalism; meet deadlines; and mentor and guide others.

Nice To Haves

• Master’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field.
• Experience in a consulting environment or at a Big 4 firm.
• Experience with ServiceNow workflows, automation, or orchestration.
• Experience with the NIST Cybersecurity Framework, Center for Internet Security, ISO 27001, or Cloud Security Alliance Cloud Controls Matrix.
• Experience supporting proposals, statements of work, or work orders.
• Experience with AI security governance frameworks, including the NIST AI Risk Management Framework or ISO/IEC 42001, or supporting responsible AI adoption.
• Experience assessing or advising on AI/ML-specific attack surface within broader ASM or CTEM programs.

Responsibilities

• Manage exposure-based remediation and patching activities aligned to CTEM priorities, leading vulnerability and patch management across infrastructure, middleware, and applications.
• Prioritize remediation using threat intelligence, exploitability, attack paths, asset criticality, and exposure data; support exception management, incident-driven response, and process improvements.
• Develop vulnerability management metrics and dashboards to track remediation progress and exposure reduction for client stakeholders.
• Develop client deliverables and mentor junior practitioners.
• Support proposals and points of view, including proposal content, staffing and pricing models, and statements of work.
• Advise clients on exposure and risk considerations associated with AI and large language model deployments, including AI-specific attack surface, data exposure, and model and supply chain risk.
• Coordinate project or workstream activities, translate technical security findings into client recommendations and status updates, and support sales pursuits, RFP responses, and cyber managed services solution development.

Benefits

• May be eligible to participate in a discretionary annual incentive program.
• Opportunities to build skills, take on leadership opportunities, and grow through mentorship and formal development programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Manager