Vulnerability Management Service Automation and Integration Architect/Engineering Manager

Deloitte Global Services Limited
United States, Virginia, McLean
May 06, 2025
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do As the Vulnerability Management Automation Architect/Engineering Manager, you will develop the vision, architecture, capability roadmap, and plans for the continuous improvement of the vulnerability management service.The mission of the position is to reduce Deloitte's risk by proactively identifying and evaluating vulnerability exposure and driving remediation through partnership, consistency, and transparency.Leading the design and integration of process automation, report automation, tool management, report generation, and third-party application integration.This will involve working with Global teams and member firm teams in all technology areas to address different types of cybersecurity risks. Responsibilities: As part of the Vulnerability Management Service, you will lead a team of automation & integration engineers and will: Manage global vulnerability management (VM) integration and regional VM solution analysis, implementation and orchestration. Design, develop, and implement automation scripts and workflows to deploy and manage vulnerability management infrastructure and applications Provide strategic advice, technical guidance and expertise to program and project staff. Participate in the design, lifecycle management, and total cost of ownership of the vulnerability management platform, applications, and infrastructure services Collaborate with cross-functional teams to understand and translate system requirements into efficient and scalable automation solutions Assist with problem escalation as needed Document architecture designs, configurations, and best practices for CI/CD pipelines, DevSecOps practices, and SDLC tooling. Provide training and knowledge transfer sessions to Development, DevOps teams and other stakeholders on the use and maintenance of CI/CD pipelines and related tools. Influence standards and platforms for future application development Mentor team members in the understanding and deployment of vulnerability management and security solutions Stay current with new and evolving technologies via formal training and self-directed education Who you'll work with: The Deloitte Global Cybersecurity function is responsible for enhancing data protection, standardizing and securing critical infrastructure, and gaining cyber visibility through security operations centers. The Cybersecurity organization delivers a comprehensive set of security services to Deloitte's global network of firms around the globe. The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Qualifications Required Good understanding of cloud architectures (Azure, AWS, GCP) and the security implications of cloud-based infrastructure. Competence in managing and optimizing vulnerability and configuration scanning tools (e.g., Qualys, Tenable, Rapid7). Technical Vulnerability Knowledge: In-depth knowledge of technical vulnerabilities and their impact. Experience automating processes and procedures Understand VMS program risk reduction strategy and leverage cadence calls and team bandwidth to prioritize risk reduction efforts Proficiency in data analysis and reporting tools (Excel, Power BI) to support vulnerability management reporting. Hands-on experience with vulnerability scanners (commercial and open-source solutions) Proven experience of working in vulnerability management in an internationally-focused industry, understanding specific challenges and strategies. Proficiency in programming & scripting languages such as Java, C#, Python, PowerShell, Bash and experience in using APIs of various solutions. Experience with DevOps practices and tools such as Azure DevOps, Git, Bamboo, Jenkins, GitHub. Experience working in Cybersecurity, Cyber Risk, Business Risk Management, Operational Risk Experience of managing small-medium technology teams Experience in management of vulnerability management and/or risk remediation Familiarity with cybersecurity vendors and services Exposure to common information security management frameworks, such as OWASP, ISO/IEC 27001, COBIT, CISA, SOC 2,and NIST, including 800-53 and the Cybersecurity Framework Education: Bachelor's Degree: preferably in a service management or information technology-related field 10 years of experience as an Applications, Solutions or Platform Architect or similar role; additional experience in cyber security, systems and applications management, including systems/application design and development preferred Preferred: Knowledge of the Deloitte firm, member firms, and the businesses Professional IT or Security management certification, at least one or more of CISSP, CCSP, CRISC, CISM, GIAC, OSCP, Security+, CEH, etc. Experience working in a program/project delivery environment Executive presence, stakeholder management, and ability to influence without authority Strong oral and written communication skills Strong listening skills to understand priorities and requirements Strong emotional intelligence and empathy Relationship building skills with internal colleagues and external customers Strong ownership culture, positive attitude, and high tolerance for ambiguity Familiarity with application, server, and network security is preferred; understanding of security architectures, network security, Active Directory, least privilege, etc Strong leadership and mentorship skills, with the ability to work collaboratively with cross-functional teams. Ability to work on multiple projects, manage multiple tasks, re-prioritize workload as demands change. Detail oriented, with proven ability to challenge and identify opportunities within existing processes and business practices. Knowledge and experience of OWASP Top 10, SANS Secure Programming, Security Engineering Principles Working knowledge of - Qualys Solutions, vulnerability, and patch Management tools Skilled in configuring and managing Attack Surface Management tools such as CyCognito. Our culture At Deloitte Global people are valued and respected for who they are - with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career. Professional development From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career. Benefits At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do-that's why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being. Recruiting for this role ends on January 4, 2025. At Deloitte Global, we know we're at our best when we look out for one another; prioritize respect, fairness, development and wellbeing; foster an inclusive culture and embrace diversity in all forms. All qualified applicants will receive consideration for employment regardless of their background, experience, identity, ability or thinking style, and if you need assistance or an accommodation during the application process for accessibility reasons this is available upon request. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider. January 4, 2025