Consultant - ASM Patching Engineer

Job Summary

Join Deloitte's Cyber Defense & Resilience team as a forward deployed engineer supporting client patching and remediation programs. In this role, you'll work directly with client infrastructure, endpoint, server, and application teams to reduce exposure and improve cyber resilience.

Work You'll Do

• Working directly with client teams to plan, track, and execute patching and remediation activities across endpoint, server, middleware, and application environments
• Translating vulnerability findings, asset context, and threat data into prioritized remediation actions
• Supporting patch deployment, validation, and reporting using enterprise tools and client processes
• Maintaining remediation records, exception tracking, and status reporting to measure exposure reduction
• Supporting automation and process improvement activities that increase patching speed, consistency, and coverage

Qualifications

• 3+ years of experience in information technology, information security, vulnerability management, patch management, or a combination of these
• 2+ years of experience supporting forward deployed engineering, remediation delivery, or client-facing technology operations in enterprise environments
• 2+ years of experience executing patching or vulnerability remediation across Windows, Linux, middleware, endpoints, or applications using tools such as BigFix, Microsoft Endpoint Configuration Manager, Red Hat Satellite, Windows Server Update Services, Tenable, Rapid7, or Qualys
• 1+ year of experience using PowerShell, Bash, Python, Ansible, Terraform, or JavaScript Object Notation for scripting, automation, or configuration activities
• 1+ year of experience using ServiceNow or another Information Technology Service Management platform to track remediation activities, exceptions, and status

Preferred Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, Information Technology, Mathematics, or Physics
• Experience in a consulting environment
• Experience preparing remediation metrics, dashboards, or status reporting
• Experience supporting patch validation, exception management, or change coordination
• Experience with the National Institute of Standards and Technology Cybersecurity Framework, Center for Internet Security, International Organization for Standardization 27001, or Cloud Security Alliance Cloud Controls Matrix