vulnerability management specialist

Your role as a Vulnerability Management Specialist will place you at the heart of cyber risk reduction efforts. You will run the program independently on a day-to-day basis, working directly with IT, security, and management teams, making sound risk-based decisions and knowing when to escalate. This is a position of real ownership and visibility, for someone who is comfortable standing on their own in demanding enterprise environments.

As a Vulnerability Management Specialist, you will:

• Lead vulnerability management activities on client engagements and work directly with IT, security, and management stakeholders, taking ownership of day-to-day delivery

• Own the end-to-end vulnerability management lifecycle: asset discovery, scanning, analysis, prioritization, remediation tracking, and verification

• Plan, configure, and execute authenticated and unauthenticated vulnerability scans across on-premises, cloud, and hybrid IT environments using enterprise-grade platforms

• Analyze and validate findings, eliminating false positives and assessing real-world exploitability

• Prioritize vulnerabilities based on risk, combining CVSS, EPSS, CISA KEV, threat intelligence, and asset criticality

• Drive remediation with asset owners and IT teams, managing SLAs, exceptions, and risk acceptances in line with client policies — and challenging stakeholders constructively where needed

• Produce clear technical reports, dashboards, and KPIs, and present status and risk posture to client management and governance forums

• Assess and mature clients’ vulnerability management programs in line with relevant standards and regulations, such as ISO 27001, NIST CSF, CIS Controls, NIS2, and DORA

• Respond to critical and zero-day vulnerability disclosures, rapidly assessing client exposure and coordinating emergency remediation

• Collaborate with our penetration testing and red team colleagues, and develop automation (scanner APIs, ticketing workflows) to improve efficiency

#WinningRequirements

To qualify for the role, you must have:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or any related discipline

• Minimum 3 years of hands-on experience in vulnerability management, security operations, or infrastructure security, including running a vulnerability management program or significant parts of one

• Proven ability to work autonomously in client-facing or enterprise environments, owning deliverables and stakeholder relationships without day-to-day supervision

• Hands-on administration of at least one enterprise scanning platform such as Tenable (Nessus, Tenable.io/.sc), Qualys, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management — including scan policies, credentialed scanning, agents, and reporting

• Solid understanding of networking, Windows and Linux environments, Active Directory, patch management, and hardening principles (e.g. CIS Benchmarks)

• Strong working knowledge of vulnerability scoring and intelligence sources: CVE, CVSS, EPSS, and CISA KEV

• Confidence to influence and challenge IT teams and asset owners, translating technical findings into business risk for both technical and executive audiences

• Excellent written and verbal communication skills in Greek and English

• Military obligations fulfilled where applicable

Ideally:

• CompTIA Security+ or CySA+, or an equivalent security certification

• Hands-on penetration testing exposure or certifications such as eJPT, OSCP, or CEH

• Experience in critical infrastructure or regulated sectors such as energy, utilities, or financial services

• Experience with cloud platforms (AWS, Azure, GCP) and cloud-native security concepts such as CSPM, CWPP, and container and Kubernetes security

• Experience with cloud security and exposure management platforms such as Wiz and Cyclops

• Experience with ITSM and ticketing platforms such as ServiceNow or Jira for remediation workflows

• Scripting skills (Python, PowerShell, Bash) for automation and scanner API integrations

#ChooseDeloitteif:

• You want to work with inspiring, ambitious, and supportive people with diverse geographical and academic backgrounds and extensive skills.

• You get excitement in managing clients shifting priorities and accomplish tasks in a challenging, fast-paced environment.

• You like to nurture people and share your knowledge with others.