Cyber - Vulnerability Management Operator

Can you imagine taking part in the transformation of leading national and international organizations?

At Deloitte, we are committed to making an impact on society, our clients, and our people.

You will ensure the Vulnerability Management Service delivers consistent, high-quality outcomes across regions. You will lead triage and prioritization of critical vulnerabilities, validate findings and remediation evidence, and drive continuous improvement and automation of VM capabilities aligned with NIST, ISO/IEC 27001 and Deloitte best practices. You will support rapid response to high-impact issues and act as a technical escalation point for operational teams.

The team Deloitte Technology works at the forefront of technology and security to protect and enable the firm globally. We operate in a collaborative, multi-disciplinary environment focused on continuous improvement, strong governance and cross-functional impact.

Key responsibilities

• Manage and optimise global VM infrastructure and scanning tool configurations (e.g., Qualys, Tenable, Rapid7); support major upgrades and platform changes to ensure stability and consistency.
• Perform in-depth validation and analysis of vulnerability findings from enterprise scanners and threat intelligence: assess exploitability, asset criticality, exposure and business impact to prioritise remediation.
• Identify and resolve false positives, compensating controls and misclassifications; conduct authenticated scanning and validate coverage across networks, OS, applications, databases and cloud assets.
• Act as Tier-2 escalation for critical or SLA-at-risk findings; coordinate with Member Firms, Infrastructure, Cloud, Application and Engineering teams to drive remediation ownership and closure.
• Track remediation commitments, validate fixes via rescans or evidence review, and ensure audit-defensible closure; support exception handling and risk acceptance processes.
• Produce reports, dashboards and exposure metrics to inform leadership and support decision-making; contribute to vulnerability trend analysis and SLA reporting.
• Automate repetitive tasks, develop scripts/reports/dashboards, and propose process improvements to increase efficiency and data quality.
• Support rapid response for zero-day vulnerabilities and executive-level incidents, including ad-hoc scans and time-sensitive analysis.
• Maintain accurate ticketing and VM records in enterprise workflow tools and contribute to runbooks, SOPs and operational documentation.

What we’re looking for

• Bachelor’s degree in Computer Science, Information Security, Information Systems or equivalent experience.
• 5+ years’ experience in vulnerability management, security operations, or infrastructure security in large, complex environments.
• Hands-on experience with vulnerability scanning platforms (e.g., Qualys, Tenable, Rapid7) and familiarity with cloud security tooling.
• Strong understanding of CVSS, exploitability factors, threat intelligence, patching lifecycles and on-prem/cloud/hybrid environments.
• Proven ability to triage critical vulnerabilities, validate remediation and communicate technical guidance to non-security stakeholders.
• Experience with CMDBs and ticketing systems (e.g., ServiceNow) and advanced proficiency in MS Excel for reporting and metrics.
• Excellent collaboration, prioritisation and communication skills; attention to detail and ability to manage multiple concurrent workstreams.

What is it like to work at Deloitte?

High-impact projects offering long-term growth and continuous learning opportunities.

Hybrid and flexible working model, with flexible hours and a healthy balance between remote work and collaboration in our offices or at client sites.

A positive and collaborative work environment, with team-building activities, cultural and sports events throughout the year.

Holistic wellbeing, supported by our physical, mental, and financial health programs, including on-site medical services.

Social impact, with access to a wide range of national and international volunteering initiatives and pro bono projects where you can contribute your time and talent.

A strong feedback culture and continuous learning, within an inclusive environment that promotes equal opportunities and personalized development plans. You may even see yourself at Deloitte University in Paris.

Exclusive benefits, including a comprehensive benefits portfolio and a flexible compensation plan.

Next steps:

If what you have read resonates with you, here is what comes next:

• Apply to the position by clicking “Apply now” and completing your profile.
• If your experience matches the role, our Talent team will contact you to get to know you better.

Start your journey with Deloitte. We will guide you through each stage of the process until your onboarding.