CybersecurityJobs.io
← Back to all jobs

Job Description

Deloitte Technology US is hiring a Senior Consultant, Cybersecurity Architecture for Threat & Vulnerability to help lead US Attack Surface Management focused on dangling DNS and Infoblox threat-management.

Responsibilities

  • Provide technical ownership for the US Attack Surface Management team’s dangling DNS and Infoblox threat-management activities
  • Establish, implement, and operate a process and supporting product for dangling DNS and Infoblox threat-management
  • Drive adoption and mature operating procedures, workflows, and controls for DNS exposure and threat management, including:
    • Tuning DNS security policies and configurations
    • Assessing and documenting exception requests
    • Periodically validating approved exceptions
  • Continuously monitor externally visible assets for dangling DNS exposures and review Infoblox threat events, including:
    • Validating indicators
    • Assessing risk
    • Escalating confirmed or suspected threats
    • Coordinating containment and remediation activities
  • Perform continuous perception monitoring to understand how Deloitte’s external attack surface is viewed by threat actors and security-rating sources, then:
    • Identify changes in externally observable risk
    • Translate signals into prioritized investigation and remediation actions
  • Conduct technical investigations to validate findings, assess risk, determine ownership, and identify required remediation actions
  • Coordinate remediation across asset owners, DNS teams, infrastructure teams, and other stakeholders; track issues through closure
  • Develop and maintain operational reports, dashboards, and performance metrics covering:
    • DNS exposures
    • Infoblox threat events
    • Investigation status
    • Remediation progress, aging, closure trends
    • Key risk indicators for technical stakeholders and leadership
  • Support compliance and audit needs by maintaining process documentation and control evidence, responding to inquiries, tracking identified gaps, and reporting remediation status
  • Escalate significant risks, unresolved findings, ownership gaps, and remediation delays to appropriate teams and leadership
  • Apply independent judgment to prioritize investigations and remediation based on exposure, threat context, and business risk
  • Collaborate across the US Attack Surface Management team and partner functions to integrate the new operational scope without delaying broader ASM priorities
  • Communicate technical findings, risk implications, and remediation actions clearly to technical stakeholders and leadership
  • All other duties as assigned

Requirements

  • Ability to work independently and collaborate as part of a team
  • Effective written and verbal communication skills
  • Meticulous attention to detail and quality of work product
  • Ability to build and sustain professional relationships
  • Ability to lead projects or workstreams
  • Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
  • Strong interpersonal skills and professional demeanor
  • Ability to meet deadlines
  • Ability to provide clear guidance to others
  • Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
  • Minimum 8 years of various technology experience
  • Minimum 5 years of cyber security experience related to cyber threats and vulnerabilities
  • Ability to travel 10%, on average, based on work you do and the clients and industries/sectors you serve
  • Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future

Preferred

  • Advanced knowledge of information security, DNS architecture, and DNS security risks
  • Experience with DNS, DDI, or DNS security platforms; Infoblox experience preferred
  • Sound judgment to prioritize and escalate cyber threats and vulnerabilities
  • Experience with operational reporting, compliance documentation, and audit support
  • DNS, DHCP, and IP address management
  • Network devices and routing
  • Infoblox or comparable DNS and DDI platforms
  • Vulnerability and attack surface management
  • Cloud services and cloud DNS
  • Threat monitoring and security investigations
  • Data analytics and operational reporting
  • Security controls, compliance, and audit support

Tech Stack

  • DNS
  • Infoblox
  • DDI
  • DHCP
  • IP address management
  • Cloud services
  • Cloud DNS
  • Network devices
  • Routing

Location & Travel

  • New Orleans, LA (onsite)
  • Travel: 10% on average

Compensation

  • USD 102,500 - 210,600 per year
  • Estimated wage range for this role

Benefits

  • Discretionary annual incentive program eligibility (subject to program rules)

Team

  • Deloitte Technology - United States (DT-US) supports Deloitte’s success
  • DT-US services include: Cyber Security; Technology Support; Technology & Infrastructure; Applications; Relationship Management; Strategy & Communications; Project Management; Financials
  • Cyber Security protects Deloitte and client data using situational awareness, threat intelligence, and a security culture
  • Focus areas include: Risk & Compliance; Identity & Access Management; Data Protection; Cyber Design; Incident Response; Security Architecture; Business Partnership

Similar Jobs