USI - FY25|R&FA|Cyber - ASM| Senior Consultant

About this role

• Provides oversight on projects, guides the team on a day-to-day basis and ensures that assigned tasks and responsibilities are fulfilled in a timely fashion
• Demonstrates understanding of business and information technology service management processes
• Interacts with clients, managers and partners to build and nurture strong relationships
• Configure and execute vulnerability scans enumerating vulnerabilities within the internal and external network
• A nalyze,enrichandprioritizespecificactivitiesdesignedtoremediatediscovered vulnerabilities such as patch deployment or configuration hardening
• Assist in producing a comprehensive operating picture and cyber security situational awareness
• Work with various vulnerability threat feeds (such as vendor bulletins), assessment tools, asset inventory tools as well as reporting tools and frameworks to match assets to identified vulnerabilities and produce reports
• Respond to requests for ad-hoc reporting and research topics from management and analysts as required
• Identify gaps in available asset information and engage with leadership on strategies to meet service-level requirements through affirmative handoff with remediation partner
• Quickly understand and deliver on company and customer requirements
• Adhere to internal operational security and other Deloitte policies
  
  

• Bachelor'sdegreeorhigherinAttackSurfaceManagement,InformationSecurity,Information Technology, Computer Science, Math, or any other related area
• 7-9 years of experience working in information technology vulnerability management, information security, incident response, red team operations, application security, reverse engineering, or other technical cyber security roles
• CertifiedInformationSystemsSecurityProfessional(CISSP),Certification inCertifiedIntrusion Analyst (GIAC), Continuous Monitoring (GMON), Certified Ethical Hacker (CEH) or equivalent
• Understandingofpossibleattackactivitiessuchasnetworkprobing/scanning,DDOS, malicious code activity, etc.
• Understanding of common network infrastructure devices such as routers and switches
• Understanding of basic networking protocols such as TCP/IP, DNS, HTTP
• UnderstandingofvulnerabilityclassificationusingNationalVulnerabilityDatabase nomenclature such as CVE/CVSS
• Basic knowledge in system security architecture and security solutions
  
  

• Provenabilitytotranslatecomplex informationsetsintospecificrecommendationsthatcan be actioned by customers to enhance their security posture
• Familiarity with cyber threats, defenses, motivations and techniques
• ExperiencewithvulnerabilityanalysistoolssuchasQualysorTenable,andtheasset provisioning/deprovisioning lifecycle
• PatchmanagementskillsandtechnologyapplicationsuchasMicrosoftSystemCenter Configuration Manager (SCCM)
• Experiencedistillingrawinformation intoactionable intelligence
• OutstandingEnglishwrittenand oralcommunicationskillsand theabilitytoprioritize work
• Strongunderstandingofthreatanalysisandenterpriselevel,mitigation strategies
• Workingknowledgeofhowmaliciouscodeoperatesandhowtechnicalvulnerabilitiesare exploited
• Strongknowledgeofoperatingsystemsandnetworkingtechnologiesin general
• Strongknowledgeofdatabases,querydesign,andhowtoanalyzedatathus obtained
• KnowledgeofsupportingtoolsetssuchasConfluence,Jira,andConfigurationManagement Databases (CMDB) such as ServiceNow
• Stronganalyticalandproblem-solving skills
• Self-motivatedtoimproveknowledgeand skills
• Astrongdesiretounderstandthewhat aswellasthewhy andthehowof security incidents
  
  

• Rotational night shifts are a pre-requisite
• The role may require Permanent night shifts basis Client/Project demands