Cyber - Vulnerability Management Operator

🤩 High-impact projects offering long-term growth and continuous learning opportunities.

☯️ Hybrid and flexible working model, with flexible hours and a healthy balance between remote work and collaboration in our offices or at client sites.

⚽ A positive and collaborative work environment, with team-building activities, cultural and sports events throughout the year.

🧘♀️ Holistic wellbeing, supported by our physical, mental, and financial health programs, including on-site medical services.

🤲 Social impact, with access to a wide range of national and international volunteering initiatives and pro bono projects where you can contribute your time and talent.

🗣️ A strong feedback culture and continuous learning, within an inclusive environment that promotes equal opportunities and personalized development plans. You may even see yourself at Deloitte University in Paris.

🤝 Exclusive benefits, including a comprehensive benefits portfolio and a flexible compensation plan.

Can you imagine taking part in the transformation of leading national and international organizations?

At Deloitte, we are committed to making an impact on society, our clients, and our people.

You will ensure the Vulnerability Management Service delivers consistent, high‑quality outcomes across regions. You will lead triage and prioritization of critical vulnerabilities, validate findings and remediation evidence, and drive continuous improvement and automation of VM capabilities aligned with NIST, ISO/IEC 27001 and Deloitte best practices. You will support rapid response to high‑impact issues and act as a technical escalation point for operational teams.

The team Deloitte Technology works at the forefront of technology and security to protect and enable the firm globally. We operate in a collaborative, multi‑disciplinary environment focused on continuous improvement, strong governance and cross‑functional impact.

• Manage and optimise global VM infrastructure and scanning tool configurations (e.g., Qualys, Tenable, Rapid7); support major upgrades and platform changes to ensure stability and consistency.
• Perform in‑depth validation and analysis of vulnerability findings from enterprise scanners and threat intelligence: assess exploitability, asset criticality, exposure and business impact to prioritise remediation.
• Identify and resolve false positives, compensating controls and misclassifications; conduct authenticated scanning and validate coverage across networks, OS, applications, databases and cloud assets.
• Act as Tier‑2 escalation for critical or SLA‑at‑risk findings; coordinate with Member Firms, Infrastructure, Cloud, Application and Engineering teams to drive remediation ownership and closure.
• Track remediation commitments, validate fixes via rescans or evidence review, and ensure audit‑defensible closure; support exception handling and risk acceptance processes.
• Produce reports, dashboards and exposure metrics to inform leadership and support decision‑making; contribute to vulnerability trend analysis and SLA reporting.
• Automate repetitive tasks, develop scripts/reports/dashboards, and propose process improvements to increase efficiency and data quality.
• Support rapid response for zero‑day vulnerabilities and executive‑level incidents, including ad‑hoc scans and time‑sensitive analysis.
• Maintain accurate ticketing and VM records in enterprise workflow tools and contribute to runbooks, SOPs and operational documentation.