Cyber Operations Manager – Threat & Vulnerability Management

About the role

Deloitte Consulting is seeking an experienced Manager to lead Threat Vulnerability Management within its Detect & Respond team. You will drive vulnerability scanning, analysis, and remediation across internal and external networks while supporting the overall cyber‑security posture of our clients.

Key responsibilities

• Configure and execute vulnerability scans on internal and external assets.
• Analyze, enrich, and prioritize remediation actions, including patch deployment and configuration hardening.
• Leverage threat feeds, assessment tools, and asset inventories to map vulnerabilities to assets and generate reports.
• Respond to ad‑hoc reporting requests, research topics, and recurring production reporting requirements.
• Identify gaps in asset information, coordinate with leadership and remediation partners, and ensure compliance with Deloitte operational security policies.

Required profile

• Bachelor’s degree in Information Security, IT, Computer Science, Mathematics or a related technical field.
• 9+ years of experience in vulnerability management, information security, incident response, red‑team operations, or related cyber‑security roles.
• Relevant certifications such as CISSP, GIAC Certified Intrusion Analyst, GIAC Continuous Monitoring, CEH, or equivalent.
• Hands‑on experience with network probing, scanning, denial‑of‑service testing, or malicious code analysis.
• Strong knowledge of networking devices (routers, switches) and protocols (TCP/IP, DNS, HTTP).
• Familiarity with vulnerability classification frameworks like CVE and CVSS.

Required skills

• Vulnerability analysis tools: Qualys, Tenable.
• Patch management technologies: Microsoft System Center Configuration Manager (SCCM).
• Asset lifecycle tools and CMDBs: ServiceNow.
• Collaboration platforms: Confluence, Jira.
• Understanding of CVE, CVSS, TCP/IP, DNS, HTTP, routers and switches.