Senior Manager - ASM Vulnerability Management - Patching

Responsibilities

• Manage exposure-based remediation and patching activities aligned to Continuous Threat Exposure Management (CTEM) priorities
• Lead vulnerability and patch management operations across infrastructure, middleware, and applications
• Prioritize remediation activities using threat intelligence, exploitability, attack paths, asset criticality, and exposure data
• Support exception management, incident-driven response activities, and process improvements to reduce cyber risk
• Develop client deliverables, contribute to proposals, and mentor junior practitioners

Requirements

• 10+ years of experience in information technology, information security, or both
• Experience leading vulnerability management, patch management, or CTEM remediation programs
• Experience remediating vulnerabilities across Linux, Windows, middleware, and applications using tools such as BigFix, MECM, Red Hat Satellite, or WSUS
• Proficiency with vulnerability scanners such as Tenable, Rapid7, or Qualys
• Automation skills using PowerShell, Bash, Python, Ansible, or Terraform
• Experience using ServiceNow or similar ITSM/CMDB platforms to coordinate remediation
• Ability to travel 50% on average based on client needs
• Legal authorization to work in the United States without sponsorship

Preferred Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field
• Experience in a consulting environment or with a Big 4 firm
• Experience with ServiceNow workflows, automation, or orchestration
• Knowledge of security frameworks such as NIST CSF, CIS, ISO 27001, or CSA CCM
• Experience supporting proposals, statements of work, or work orders

About the Company

Deloitte’s Cyber Specialists help organizations manage cyber risk through stronger security, greater visibility, and embedded privacy practices. Our Cyber Defense & Resilience team works with clients to design, implement, and operate programs that protect critical assets and respond to evolving threats.