Cyber Senior Consultant - ASM Vulnerability Management & Patching

About the role

Join Deloitte's Cyber Defense & Resilience team, focused on patching, remediation and exposure reduction. You will work directly with client stakeholders to prioritize vulnerabilities, coordinate patch execution and turn exposure data into structured patching plans, reporting and measurable risk reduction. The role is open in 19 US locations and recruiting ends on 05/31/2027.

Key responsibilities

• Lead day-to-day engineering execution for client patching and remediation across infrastructure, middleware, endpoints and applications
• Prioritize remediation using vulnerability findings, asset criticality, exploitability and threat context
• Coordinate with client technology teams on patch planning, execution, validation and exception tracking
• Develop dashboards, status reporting and remediation metrics showing progress against exposure reduction goals
• Support automation and mentor junior practitioners in patching, remediation and operational delivery
• Help identify exposure and risk issues raised by AI and large language model deployments, including AI-specific attack surface and data exposure

Required profile

• 5+ years in IT, information security, vulnerability management, patch management or a combination
• 4+ years leading remediation execution, patch coordination or forward-deployed engineering in enterprise environments
• Ability to travel about 50% on average
• Limited immigration sponsorship may be available

Required skills

• 4+ years executing or overseeing patching on Windows, Linux, middleware, endpoints or applications with tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, WSUS, Tenable, Rapid7 or Qualys
• 2+ years scripting or automating with PowerShell, Bash, Python, Ansible, Terraform or JSON
• 2+ years managing remediation workflows, exceptions and metrics in ServiceNow or another ITSM platform
• Familiarity with AI risk considerations (prompt injection, data poisoning, model supply chain risk) and experience using AI tools for triage, prioritization, scripting or integrations
• Vendor-specific credential or proof of training (e.g. Qualys, Tenable, Rapid7, Wiz)
• Preferred: bachelor's degree, consulting experience, AI agent development, client presentation experience, NIST CSF, CIS, ISO 27001, CSA CCAM familiarity, CompTIA Security+/Network+ or CISSP, and knowledge of SOWs/RFPs