Cyber Senior Consultant - ASM Vulnerability Management - Patching

Deloitte • Jersey City, NJ

165d • $105,400 - $207,800

About The Position

Join Deloitte’s Cyber Defense & Resilience team, focused on patching, remediation, and exposure reduction. The Senior Consultant works directly with client stakeholders to prioritize vulnerabilities, coordinate patch execution, and improve remediation outcomes across enterprise environments. The role bridges security findings with operational action by translating exposure data into structured patching plans, reporting, and measurable risk reduction. It also includes identifying exposure and risk considerations introduced by AI and large language model deployments, including AI-specific attack surface and data exposure. The role is available in 19 listed U.S. locations and recruiting ends on 05/31/2027. Average travel is 50%, depending on the work and the clients and industries served. The estimated salary range is $105,400 to $207,800, with possible eligibility for a discretionary annual incentive program.

Requirements

• 5+ years of experience in information technology, information security, vulnerability management, patch management, or a combination of these.
• 4+ years of experience leading remediation execution, patch coordination, or forward deployed engineering activities in enterprise environments.
• 4+ years of experience executing or overseeing patching across Windows, Linux, middleware, endpoints, or applications using tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys.
• 2+ years of experience using PowerShell, Bash, Python, Ansible, Terraform, or JavaScript Object Notation for scripting, automation, or configuration activities.
• 2+ years of experience using ServiceNow or another Information Technology Service Management platform to manage remediation workflows, exceptions, metrics, and status reporting.
• Familiarity with AI and Frontier AI risk considerations, including AI-related threat vectors such as prompt injection, data poisoning, and model supply chain risk, and their implications for exposure management programs.
• Experience using AI tools to triage, prioritize, create scripts, or integrate with other cybersecurity tools.
• Hold a vendor-specific credential or proof of training completion, such as Qualys Certified Specialist, Tenable Vulnerability Management Expert, Rapid7 InsightIDR Certified Specialist, or Wiz Defend Fundamentals.
• Ability to travel 50%, on average, based on the work and the clients and industries/sectors served.
• Ability to work independently and collaborate as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Nice To Haves

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, Mathematics, or Physics.
• Experience in a consulting environment.
• Experience creating or developing AI agents.
• Experience presenting remediation status, risk updates, or delivery progress to client stakeholders.
• Experience with vulnerability prioritization based on exploitability, asset criticality, or attack path data.
• Experience with the National Institute of Standards and Technology Cybersecurity Framework, Center for Internet Security, International Organization for Standardization 27001, Cloud Security Alliance Cloud Controls Matrix, or similar standards and frameworks.
• Relevant certification such as CompTIA Security+, CompTIA Network+, or CISSP.
• Familiarity with how statements of work (SOWs) or requests for proposal (RFPs) are structured and used in a consulting or managed services engagement.

Responsibilities

• Lead day-to-day engineering execution for client patching and remediation activities across infrastructure, middleware, endpoints, and applications.
• Prioritize remediation activities using vulnerability findings, asset criticality, exploitability, and threat context.
• Coordinate with client technology teams on patch planning, execution, validation, and exception tracking.
• Develop dashboards, status reporting, and remediation metrics to show progress against exposure reduction goals.
• Support automation and mentor junior practitioners in patching, remediation, and operational delivery activities.
• Support identification of exposure and risk considerations introduced by AI and large language model deployments, including AI-specific attack surface and data exposure.

Benefits

• Possible eligibility to participate in a discretionary annual incentive program, subject to program rules and individual and organizational performance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed