Vulnerability Management Specialist

Vulnerability Management Specialist

What impact will you make?

#YourOpportunity

Ready to help organizations strengthen their vulnerability management programs? Want to be a trusted security expert, turning thousands of scan findings into a clear, prioritized plan that measurably reduces risk? Want to be backed by talented security professionals who are passionate about offensive security, threat intelligence, and cyber resilience? Join a world-class organization that invests in your growth and offers an inclusive, collaborative culture where your contributions are felt from day one.

We are currently seeking an experienced, self-driven Vulnerability Management Specialist with a strong foundation in IT infrastructure and information security to join our Cyber Security team. As part of a global cyber network, our specialists help clients across Greece and internationally — from energy and utilities companies to regulated financial institutions — identify, prioritize, and remediate security weaknesses across their IT and cloud estates.

In this role, you will contribute to client engagements across vulnerability management, with the backing of our penetration testing and red team specialists and access to global knowledge exchange and continuous training — building a career path toward vulnerability management leadership, security advisory, penetration testing, or security architecture.

#YourRole

Your role as a Vulnerability Management Specialist will place you at the heart of cyber risk reduction efforts. You will run the program independently on a day-to-day basis, working directly with IT, security, and management teams, making sound risk-based decisions and knowing when to escalate. This is a position of real ownership and visibility, for someone who is comfortable standing on their own in demanding enterprise environments.

As a Vulnerability Management Specialist, you will:

• Lead vulnerability management activities on client engagements and work directly with IT, security, and management stakeholders, taking ownership of day-to-day delivery
• Own the end-to-end vulnerability management lifecycle: asset discovery, scanning, analysis, prioritization, remediation tracking, and verification
• Plan, configure, and execute authenticated and unauthenticated vulnerability scans across on-premises, cloud, and hybrid IT environments using enterprise-grade platforms
• Analyze and validate findings, eliminating false positives and assessing real-world exploitability
• Prioritize vulnerabilities based on risk, combining CVSS, EPSS, CISA KEV, threat intelligence, and asset criticality
• Drive remediation with asset owners and IT teams, managing SLAs, exceptions, and risk acceptances in line with client policies — and challenging stakeholders constructively where needed
• Produce clear technical reports, dashboards, and KPIs, and present status and risk posture to client management and governance forums
• Assess and mature clients’ vulnerability management programs in line with relevant standards and regulations, such as ISO 27001, NIST CSF, CIS Controls, NIS2, and DORA
• Respond to critical and zero-day vulnerability disclosures, rapidly assessing client exposure and coordinating emergency remediation
• Collaborate with our penetration testing and red team colleagues, and develop automation (scanner APIs, ticketing workflows) to improve efficiency

#WinningRequirements

To qualify for the role, you must have:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or any related discipline
• Minimum 3 years of hands-on experience in vulnerability management, security operations, or infrastructure security, including running a vulnerability management program or significant parts of one
• Proven ability to work autonomously in client-facing or enterprise environments, owning deliverables and stakeholder relationships without day-to-day supervision
• Hands-on administration of at least one enterprise scanning platform such as Tenable (Nessus, Tenable.io/.sc), Qualys, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management — including scan policies, credentialed scanning, agents, and reporting
• Solid understanding of networking, Windows and Linux environments, Active Directory, patch management, and hardening principles (e.g. CIS Benchmarks)
• Strong working knowledge of vulnerability scoring and intelligence sources: CVE, CVSS, EPSS, and CISA KEV
• Confidence to influence and challenge IT teams and asset owners, translating technical findings into business risk for both technical and executive audiences
• Excellent written and verbal communication skills in Greek and English
• Military obligations fulfilled where applicable

• CompTIA Security+ or CySA+, or an equivalent security certification
• Hands-on penetration testing exposure or certifications such as eJPT, OSCP, or CEH
• Experience in critical infrastructure or regulated sectors such as energy, utilities, or financial services
• Experience with cloud platforms (AWS, Azure, GCP) and cloud-native security concepts such as CSPM, CWPP, and container and Kubernetes security
• Experience with cloud security and exposure management platforms such as Wiz and Cyclops
• Experience with ITSM and ticketing platforms such as ServiceNow or Jira for remediation workflows
• Scripting skills (Python, PowerShell, Bash) for automation and scanner API integrations

#ChooseDeloitteif:

• You want to work with inspiring, ambitious, and supportive people with diverse geographical and academic backgrounds and extensive skills.
• You get excitement in managing clients shifting priorities and accomplish tasks in a challenging, fast-paced environment.
• You like to nurture people and share your knowledge with others.

#AboutDeloitte

Our services

Deloitte offers Global professional services that include Audit, Risk Advisory, Tax, Consulting and Financial Advisory. Our approach combines insight and innovation from multiple disciplines with global business and industry expertise to help our clients excel anywhere in the world.

We deliver outstanding impact on the reputation and success of our clients, in Greece and globally. In pursuing this we contribute to a sustainable and prosperous society, and are firm believers in the positive impact business can and should have on the world it operates within.

Our Purpose

Our purpose, “To make an impact that matters for our clients, our people and society “- defines who we are and what we stand for. This is not about size, it's about being the first choice. The first choice for the largest and most influential clients, and the first choice for the best talent.

Our values

At Deloitte we foster a collaborative culture where talented individuals can produce their best work. We value innovative thinking, diverse insights and a genuinely distinctive level of customer service. We value difference, with respect at the heart of our inclusive culture, and we support agile working arrangements.

Our talent experience

From day one at our firm, practitioners are part of a community. Our development and career progression framework will help them develop the skills and capabilities to succeed. The wellness of our people and the ability to offer agile working arrangements is at the centre of our unique talent experience. We create a workplace that encourages collaboration, creativity, inclusiveness to ensure our staff are supported, encouraged, and feel a sense of purpose and meaning in what they do each day.

Sounds like the sort of role for you? Apply now.