Senior Consultant Cybersecurity Architecture - Threat & Vulnerability

Deloitte • Dayton, OH

4d • $102,500 - $210,600

About The Position

Deloitte Technology US is hiring a Senior Consultant in Cybersecurity Architecture focused on threat and vulnerability management. The role provides technical ownership for the US Attack Surface Management team’s dangling DNS and Infoblox threat-management activities and establishes, operates, and matures the associated processes, product adoption, workflows, and controls.

The successful candidate will monitor externally visible assets and Infoblox threat events, investigate and validate findings, assess risk, coordinate containment and remediation, and track issues through closure. The role also includes continuous perception monitoring of Deloitte’s external attack surface, operational reporting and dashboards, compliance and audit support, and clear communication and escalation of significant risks and remediation needs. The candidate will collaborate across the ASM team and partner functions, independently prioritize work, and help integrate this scope without delaying broader ASM priorities.

The position requires a bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering; at least eight years of technology experience; and at least five years of cybersecurity experience related to cyber threats and vulnerabilities. Travel averages 10%. Candidates must be legally authorized to work in the United States without current or future employer sponsorship. The role is available in 32 listed US locations.

Requirements

• Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering.
• At least 8 years of technology experience.
• At least 5 years of cybersecurity experience related to cyber threats and vulnerabilities.
• Ability to travel an average of 10%, based on the work and clients and industries or sectors served.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
• Ability to work independently and collaboratively as part of a team.
• Effective written and verbal communication skills.
• Meticulous attention to detail and quality of work product.
• Ability to build and sustain professional relationships.
• Ability to lead projects or workstreams.
• Ability to manage and prioritize multiple tasks in a fast-paced, dynamic environment.
• Strong interpersonal skills and professional demeanor.
• Ability to meet deadlines.
• Ability to provide clear guidance to others.

Nice To Haves

• Advanced knowledge of information security, DNS architecture, and DNS security risks.
• Experience with DNS, DDI, or DNS security platforms; Infoblox experience is preferred.
• Sound judgment and ability to prioritize and escalate cyber threats and vulnerabilities.
• Experience with operational reporting, compliance documentation, and audit support.
• Knowledge of DNS, DHCP, and IP address management.
• Knowledge of network devices and routing.
• Experience with Infoblox or comparable DNS and DDI platforms.
• Experience with vulnerability and attack surface management.
• Knowledge of cloud services and cloud DNS.
• Experience with threat monitoring and security investigations.
• Experience with data analytics and operational reporting.
• Knowledge of security controls, compliance, and audit support.

Responsibilities

• Provide technical ownership for the US Attack Surface Management team’s dangling DNS and Infoblox threat-management activities.
• Establish, implement, and operate the dangling DNS and Infoblox threat-management process and supporting product.
• Drive product adoption and mature operating procedures, workflows, and controls for DNS exposure and threat management.
• Tune DNS security policies and configurations; assess and document exception requests; and periodically validate approved exceptions.
• Continuously monitor externally visible assets for dangling DNS exposures and review Infoblox threat events.
• Validate indicators, assess risk, escalate confirmed or suspected threats, and coordinate containment and remediation activities.
• Perform continuous perception monitoring to assess how Deloitte’s external attack surface is viewed by threat actors and security-rating sources.
• Identify changes in externally observable risk and translate signals into prioritized investigation and remediation actions.
• Conduct technical investigations to validate findings, assess risk, determine ownership, and identify required remediation actions.
• Coordinate remediation across asset owners, DNS teams, infrastructure teams, and other stakeholders, and track issues through closure.
• Develop and maintain operational reports, dashboards, and performance metrics covering DNS exposures, Infoblox threat events, investigation status, remediation progress, aging, closure trends, and key risk indicators.
• Support compliance and audit requirements by maintaining process documentation and control evidence, responding to inquiries, tracking identified gaps, and reporting remediation status.
• Escalate significant risks, unresolved findings, ownership gaps, and remediation delays to appropriate teams and leadership.
• Use independent judgment to prioritize investigations and remediation based on exposure, threat context, and business risk.
• Collaborate across the US Attack Surface Management team and partner functions to integrate the new operational scope without delaying broader ASM priorities.
• Communicate technical findings, risk implications, and remediation actions clearly to technical stakeholders and leadership.
• Perform other duties as assigned.

Benefits

• Broad range of employee benefits.
• May be eligible to participate in a discretionary annual incentive program, subject to program rules and performance factors.
• Opportunities to build new skills, take on leadership opportunities, and grow through mentorship and formal development programs.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior