Senior Manager - Asm Vulnerability Management - Patching

Deloitte Deloitte · Consulting

Senior Manager role focused on vulnerability management and patching within a cybersecurity context. The role involves leading remediation efforts, prioritizing activities using threat intelligence, and coordinating with cross-functional stakeholders to reduce cyber risk. Experience with various vulnerability management tools and automation scripting is required.

What you'd actually do

  1. Managing exposure-based remediation and patching activities aligned to CTEM priorities
  2. Leading vulnerability and patch management operations across infrastructure, middleware, and applications
  3. Prioritizing remediation activities using threat intelligence, exploitability, attack paths, asset criticality, and exposure data
  4. Supporting exception management, incident-driven response activities, and process improvements that reduce cyber risk
  5. Developing client deliverables, contributing to proposals and points of view, and mentoring junior practitioners

Skills

Required

  • 10+ years of experience in information technology, information security, or both
  • Experience leading vulnerability management, patch management, or continuous threat exposure management remediation programs
  • Experience remediating vulnerabilities across Linux, Windows, middleware, and applications using tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys
  • Experience automating remediation workflows using PowerShell, Bash, Python, JavaScript Object Notation, Ansible, Terraform, or a combination of these
  • Experience using Information Technology Service Management or configuration management database platforms such as ServiceNow to coordinate remediation and report exposure reduction
  • Ability to travel 50%, on average
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Nice to have

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, or a related field
  • Experience in a consulting environment or with a Big 4 firm
  • Experience with ServiceNow workflows, automation, or orchestration
  • Experience with frameworks such as the National Institute of Standards and Technology Cybersecurity Framework, Center for Internet Security, International Organization for Standardization 27001, or Cloud Security Alliance Cloud Controls Matrix
  • Experience supporting proposals, statements of work, or work orders

What the JD emphasized

  • Experience leading vulnerability management, patch management, or continuous threat exposure management remediation programs
  • Experience remediating vulnerabilities across Linux, Windows, middleware, and applications using tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys
  • Experience automating remediation workflows using PowerShell, Bash, Python, JavaScript Object Notation, Ansible, Terraform, or a combination of these
  • Experience using Information Technology Service Management or configuration management database platforms such as ServiceNow to coordinate remediation and report exposure reduction
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.