Deloitte US

The Vulnerability Mitigation Expert reduces vulnerability risk and attack surface exposure through continuous data analysis that enables crucial infrastructure resiliency and stakeholder visibility into cyber threats. This role is focused on providing tailored mitigation strategies and improvements plans, for vulnerabilities identified through government authorities and cyber security assessment services. This role is Primarily remote with the ability to attend various, infrequent in-person client meetings/events in DC area. Candidate will need to reside in the DC Metro Area

Things you’ll do:

• Research, analyze, and assess attack surface and vulnerability data
• Develop tailored and actionable mitigation strategies and plans to address vulnerability risk
• Work with new and emerging vulnerability data to identify potential attack paths in critical systems.
• Document and present mitigation strategies and plans to the client and stakeholders
• Analyze the root cause of vulnerabilities and support the prioritization of mitigations based on risk and return on mitigation
• Provide mitigation strategies that prioritize risk against level of effort for multiple systems or organizations
• Catalog mitigation advice, challenges, and trends and patterns
• Provide subject matter expertise on tailored mitigations to resolve and remediate vulnerabilities on targeted technologies

Required Qualifications:

• BS or BA degree
• 5-10+ years relevant experience
• experience and knowledge of tools such as Tenable Nessus, Qualys, AppDetective, and WebInspect, LookingGlass, BlackKite, Shodan
• secure architecture designs and use of detection/protection mechanisms (e.g., firewalls, IDS/IPS, full-packet capture technologies) to mitigate risk

• Experience with cybersecurity assessments and assessment data such as Security Architecture Reviews (SARs), Validated Architecture Reviews (VADRs), Risk and Vulnerability Assessments (RVAs)
• Experience reviewing assessments, assessment data, and architecture diagrams to develop mitigation strategies
• Experience designing and developing vulnerability mitigation strategies such as security controls to mitigate software vulnerabilities
• Candidate must be able to obtain a clearance without the need for sponsorship

Preferred:

• Strong analytical, organizational, and time management skills
• Ability to coordinate and be flexible with a cross-functional team
• Ability to drive action to achieve results with minimal direction
• Executive presence and comfort engaging with clients.
• Keen attention to detail, grammar, and formatting
• High drive for continuous learning and research
• Strong communication (written and verbal) and issue resolution skills
• Ability to write clearly, often about complex topics

Familiarity and working knowledge of penetration testing tools such as Kali Linux, Metasploit, Cobalt Strike)

• Experience working in a fast-paced client environment
• Experience performing security code reviews
• Ability to communicate to both technical and non-technical audiences information related to vulnerabilities
• Experience writing technical documents for both technical and non-technical audiences

Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.