Senior Consultant Cybersecurity Architecture - Threat & Vulnerability
Job Description
Deloitte Technology US is hiring a Senior Consultant, Cybersecurity Architecture for Threat & Vulnerability to help lead US Attack Surface Management focused on dangling DNS and Infoblox threat-management.
Responsibilities
- Provide technical ownership for the US Attack Surface Management team’s dangling DNS and Infoblox threat-management activities
- Establish, implement, and operate a process and supporting product for dangling DNS and Infoblox threat-management
- Drive adoption and mature operating procedures, workflows, and controls for DNS exposure and threat management, including:
- Tuning DNS security policies and configurations
- Assessing and documenting exception requests
- Periodically validating approved exceptions
- Continuously monitor externally visible assets for dangling DNS exposures and review Infoblox threat events, including:
- Validating indicators
- Assessing risk
- Escalating confirmed or suspected threats
- Coordinating containment and remediation activities
- Perform continuous perception monitoring to understand how Deloitte’s external attack surface is viewed by threat actors and security-rating sources, then:
- Identify changes in externally observable risk
- Translate signals into prioritized investigation and remediation actions
- Conduct technical investigations to validate findings, assess risk, determine ownership, and identify required remediation actions
- Coordinate remediation across asset owners, DNS teams, infrastructure teams, and other stakeholders; track issues through closure
- Develop and maintain operational reports, dashboards, and performance metrics covering:
- DNS exposures
- Infoblox threat events
- Investigation status
- Remediation progress, aging, closure trends
- Key risk indicators for technical stakeholders and leadership
- Support compliance and audit needs by maintaining process documentation and control evidence, responding to inquiries, tracking identified gaps, and reporting remediation status
- Escalate significant risks, unresolved findings, ownership gaps, and remediation delays to appropriate teams and leadership
- Apply independent judgment to prioritize investigations and remediation based on exposure, threat context, and business risk
- Collaborate across the US Attack Surface Management team and partner functions to integrate the new operational scope without delaying broader ASM priorities
- Communicate technical findings, risk implications, and remediation actions clearly to technical stakeholders and leadership
- All other duties as assigned
Requirements
- Ability to work independently and collaborate as part of a team
- Effective written and verbal communication skills
- Meticulous attention to detail and quality of work product
- Ability to build and sustain professional relationships
- Ability to lead projects or workstreams
- Ability to manage and prioritize multiple tasks in a fast-paced and dynamic environment
- Strong interpersonal skills and professional demeanor
- Ability to meet deadlines
- Ability to provide clear guidance to others
- Bachelor’s degree or equivalent in Information Technology, Computer Science, or Engineering
- Minimum 8 years of various technology experience
- Minimum 5 years of cyber security experience related to cyber threats and vulnerabilities
- Ability to travel 10%, on average, based on work you do and the clients and industries/sectors you serve
- Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
Preferred
- Advanced knowledge of information security, DNS architecture, and DNS security risks
- Experience with DNS, DDI, or DNS security platforms; Infoblox experience preferred
- Sound judgment to prioritize and escalate cyber threats and vulnerabilities
- Experience with operational reporting, compliance documentation, and audit support
- DNS, DHCP, and IP address management
- Network devices and routing
- Infoblox or comparable DNS and DDI platforms
- Vulnerability and attack surface management
- Cloud services and cloud DNS
- Threat monitoring and security investigations
- Data analytics and operational reporting
- Security controls, compliance, and audit support
Tech Stack
- DNS
- Infoblox
- DDI
- DHCP
- IP address management
- Cloud services
- Cloud DNS
- Network devices
- Routing
Location & Travel
- New Orleans, LA (onsite)
- Travel: 10% on average
Compensation
- USD 102,500 - 210,600 per year
- Estimated wage range for this role
Benefits
- Discretionary annual incentive program eligibility (subject to program rules)
Team
- Deloitte Technology - United States (DT-US) supports Deloitte’s success
- DT-US services include: Cyber Security; Technology Support; Technology & Infrastructure; Applications; Relationship Management; Strategy & Communications; Project Management; Financials
- Cyber Security protects Deloitte and client data using situational awareness, threat intelligence, and a security culture
- Focus areas include: Risk & Compliance; Identity & Access Management; Data Protection; Cyber Design; Incident Response; Security Architecture; Business Partnership