Continuous Threat Exposure Management (CTEM) Manager
Strategy, Growth, and Transformation | Enterprise Technology Strategy and Transformation
Same job available in 26 locations
Austin, Texas, United States
Boca Raton, Florida, United States
Charlotte, North Carolina, United States
Chicago, Illinois, United States
Costa Mesa, California, United States
Dallas, Texas, United States
Detroit, Michigan, United States
Fort Worth, Texas, United States
Grand Rapids, Michigan, United States
Hermitage, Tennessee, United States
Houston, Texas, United States
Indianapolis, Indiana, United States
Jacksonville, Florida, United States
Los Angeles, California, United States
Memphis, Tennessee, United States
Miami, Florida, United States
Nashville, Tennessee, United States
New York, New York, United States
Raleigh, North Carolina, United States
Sacramento, California, United States
San Antonio, Texas, United States
San Diego, California, United States
San Francisco, California, United States
Seattle, Washington, United States
Tallahassee, Florida, United States
Tampa, Florida, United States
Position Summary
Are you an experienced cybersecurity professional looking to take on complex challenges, expand your leadership impact, and help shape the future of cyber defense? At Deloitte & Touche LLP, you’ll work with leading organizations to address a critical business issue: strengthening security while enabling innovation and reducing threat exposure. Join Deloitte’s Cyber Defense & Resilience Continuous Threat Exposure Management (CTEM) team to help clients identify, assess, and reduce their attack surface and overall cyber risk. In this role, you’ll bring your experience to high-impact client environments, work alongside top cyber practitioners, and contribute to some of the market’s most complex and strategic security engagements.
Work you’ll do****
As a Cyber Defense & Resilience Manager, you will lead teams and work directly with clients to address complex attack surface security challenges and strengthen their overall cyber posture. You will support organizations in reducing risk by applying leading practices across cybersecurity, security operations, and threat exposure management. This role offers the opportunity to help clients navigate an evolving threat landscape while delivering practical, business-aligned security solutions. In this role, you will:
· Execute exposure-based patching and automation aligned to CTEM priorities
· Lead teams and build trusted client relationships through high-quality delivery
· Oversee end-to-end patching operations, including deployment and maintenance of vulnerability and patch management tools across technologies and lifecycle phases
· Provide technical guidance across vulnerability management, patching, exception management, and reporting
· Identify opportunities to improve efficiency, reduce risk, and enhance threat visibility
· Develop clear client deliverables and support proposals, POVs, and firm initiatives
· Mentor junior team members and drive innovation in next-generation security solutions
The team
At Deloitte, our Cyber Specialists help organizations manage cyber risk and drive business value through stronger security, greater visibility, and embedded privacy. By combining program design, implementation, operations, and incident response capabilities with deep industry and mission knowledge, we help clients protect their most valuable assets, enable secure digital transformation, and respond quickly to an evolving threat landscape.
Required:****
- 10+ years of experience in information technology and/or information security
- Experience working with service delivery teams across multiple geographic regions
- Demonstrated ability to plan, design, deploy, operationalize, and lead secure, scalable vulnerability and patch management programs from strategy through execution
- Experience owning the end-to-end CTEM remediation lifecycle, including exposure identification, prioritization, patch execution, validation, and reporting
- Hands-on experience remediating vulnerabilities across operating systems, middleware, and applications, including critical exposures such as zero-days, KEVs, and externally exposed assets
- Ability to translate CTEM signals, threat intelligence, exploitability, attack paths, and asset criticality into risk-based patching and remediation plans
- Experience leading continuous patching operations aligned to real-time threat conditions, including emergency response for active threats and exploitation campaigns
- Experience integrating vulnerability management, CTEM, and attack surface management platforms with patch management and automation tools
- Strong hands-on experience with patch management tools such as BigFix, SCCM/MECM, Red Hat Satellite, and WSUS, and vulnerability management tools such as Tenable, Rapid7, and Qualys
- Proficiency in PowerShell, Bash, Python, and JSON, with experience using Ansible, Terraform, and related orchestration tools to drive automation-first patching strategies
- Experience validating remediation through rescans, system health checks, exposure reduction metrics, and attack path disruption
- Ability to remove remediation blockers and coordinate patch windows and remediation activities across infrastructure, application, OT, and asset owner teams
- Experience developing patch procedures, runbooks, exception processes, and KPI reporting focused on exposure reduction, not just patch compliance
- Strong understanding of CVSS, exploitability, exposure context, and core security principles such as defense-in-depth, least privilege, security architecture, and threat modeling
- Experience with Linux and Windows patching and working knowledge of ITSM and CMDB platforms such as ServiceNow
- Foundational knowledge of AI and LLM concepts, including common use cases, risks, and security considerations
- Strong client-facing, consulting, collaboration, communication, and relationship-building skills, with the ability to work independently and exercise sound professional judgment
- Strong analytical, problem-solving, and troubleshooting skills, with experience supporting client proposals and work orders
- Additional Requirements:
· Travel up to 50%.
· Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
· Identify opportunities to improve engagement profitability.
· Excellent teamwork and interpersonal skills.
Preferred:****
· Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field
· Consulting or Big 4 experience preferred
· Familiarity with frameworks such as NIST CSF, CIS, ISO 27001, and CSA CCM
· Experience with ServiceNow workflows, automation, and orchestration
· Strong proposal development, communication, project management, and organizational skills
· Excellent writing and verbal communication skills.
#CDRCyber26
**Compensation
**The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions, including but not limited to skill sets, experience and training, licensure and certifications, and other business and organizational needs. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $124,700 - $229,500.
Deloitte is committed to providing reasonable accommodations for people with disabilities. If you require a reasonable accommodation to participate in the recruiting process, please direct your inquiries to the Global Call Center (GCC) at USTalentCICInbox@deloitte.com.
**Recruiting tips**
From developing a stand out resume to putting your best foot forward in the interview, we want you to feel prepared and confident as you explore opportunities at Deloitte. Check out recruiting tips from Deloitte recruiters.
**Benefits**
At Deloitte, we know that great people make a great organization. We value our people and offer employees a broad range of benefits. Learn more about what working at Deloitte can mean for you.
**Our people and culture**
Our inclusive culture empowers our people to be who they are, contribute their unique perspectives, and make a difference individually and collectively. It enables us to leverage different ways of thinking, ideas, and perspectives, and bring more creativity and innovation to help solve our clients' most complex challenges. This makes Deloitte one of the most rewarding places to work.
Our purpose
Deloitte’s purpose is to make an impact that matters for our people, clients, and communities. At Deloitte, purpose is synonymous with how we work every day. It defines who we are. Our purpose comes through in our work with clients that enables impact and value in their organizations, as well as through our own investments, commitments, and actions across areas that help drive positive outcomes for our communities. Learn more.
**Professional development**
From entry-level employees to senior leaders, we believe there’s always room to learn. We offer opportunities to build new skills, take on leadership opportunities and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
As used in this posting, "Deloitte" means Deloitte & Touche LLP, a subsidiary of Deloitte LLP. Please see [www.deloitte.com/us/about](http://www.deloitte.com/us/about) for a detailed description of the legal structure of Deloitte LLP and its subsidiaries. Certain services may not be available to attest clients under the rules and regulations of public accounting.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.
Qualified applicants with criminal histories, including arrest or conviction records, will be considered for employment in accordance with the requirements of applicable state and local laws, including the Los Angeles County Fair Chance Ordinance for Employers, City of Los Angeles’s Fair Chance Initiative for Hiring Ordinance, San Francisco Fair Chance Ordinance, and the California Fair Chance Act. See notices of various fair chance hiring and ban-the-box laws where available. **Fair Chance Hiring and Ban-the-Box Notices | Deloitte US Careers**
Requisition code: 341053
Job ID 341053