Cyber Consultant - ASM Vulnerability Management & Patching

About the role

Deloitte is hiring a Cyber Consultant for its Cyber Defense & Resilience Continuous Threat Exposure Management (CTEM) team. The consultant supports clients in identifying, prioritizing and remediating security exposures across complex technology environments, strengthening vulnerability management and patching processes and improving visibility into risk. The role is open to 25 locations in the United States and recruiting ends on 05/31/2027.

Key responsibilities

• Support vulnerability remediation and patching activities aligned to CTEM priorities
• Execute vulnerability and patch management tasks across infrastructure, middleware and applications
• Analyze exposure data, asset criticality, exploitability and attack paths to prioritize remediation
• Assist with exception management, reporting and process improvement that reduce cyber risk
• Prepare client-facing analyses, dashboards and status updates tracking remediation progress
• Help identify and document exposure and risk considerations from AI and large language model deployments, including AI-specific attack surface and data exposure

Required profile

• 3+ years of experience in information technology, information security, vulnerability management or patch management
• Experience remediating vulnerabilities across Linux, Windows, middleware and applications
• Ability to travel about 50% on average
• Limited immigration sponsorship may be available

Required skills

• Tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, WSUS, Tenable, Rapid7, Qualys, PowerShell, Bash, Python, Ansible, Terraform, JavaScript Object Notation, or ServiceNow
• Vendor-specific credential or documented training (e.g., Qualys Certified Specialist, Tenable Vulnerability Management Expert, Rapid7 InsightIDR Certified Specialist, Wiz Defend Fundamentals)
• Preferred: bachelor's degree in a relevant field, consulting experience, AI agent development, security frameworks (NIST CSF, CIS, ISO 27001, CSA CCMM) and CompTIA Network+ or Security+

The stated wage range is $82,600 to $162,800, depending on skills, experience and location.