Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization.
VMS Automation and Integration Engineer
Deloitte Technology Information Technology Posted: 09-Jul-2025
Same job available in 3 locations
Hermitage, Tennessee, United States
Nashville, Tennessee, United States
Tampa, Florida, United States
Work you'll do
As the Vulnerability Management (VM) Automation and Integration (A&I) Engineer, you will maintain and engineer solutions for the vulnerability management operating platform including data management and all integrations. The VM A&I Engineer will have responsibility for providing security technology expertise and contributing to the support of VM operations, conducting a large number and variety of VM tasks. The VM A&I Engineer will have experience with broad areas of technology and security with the ability to align technical security solutions with business requirements. In this role, you will be designing, implementing, and maintaining automation workflows and integrations that enhance our operational efficiency and productivity. The VM A&I Engineer will work with Global teams and member firm teams in all technology areas to address different types of cybersecurity risks.
Responsibilities:
- Manage global vulnerability management (VM) integration and regional VM solution analysis, implementation and orchestration.
- Design, develop, and implement automation scripts and workflows to deploy and manage vulnerability management infrastructure and applications
- Responsible for overseeing platform implementation and development
- Responsible for platform documentation, documenting design decisions, and overseeing all architectural deliverables for the platform
- Provide strategic advice, technical guidance and expertise to program and project staff.
- Participate in the design, lifecycle management, and total cost of ownership of the vulnerability management platform, applications, and infrastructure services
- Collaborate with cross-functional teams to understand and translate system requirements into efficient and scalable automation solutions
- Assist with problem escalation as needed
- Document architecture designs, configurations, and best practices for CI/CD pipelines, DevSecOps practices, and SDLC tooling.
- Provide training and knowledge transfer sessions to Development teams and other stakeholders on the use and maintenance of CI/CD pipelines and related tools.
- Stay current with new and evolving technologies via formal training and self-directed education
The team
Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Qualifications
Required:
- Bachelor’s Degree: preferably in a service management or information technology-related field
- 5+ years experience working in Information Security
- Competence in managing and optimizing vulnerability and configuration scanning tools (e.g., Qualys, Tenable, Rapid7).
- Technical Vulnerability Knowledge: In-depth knowledge of technical vulnerabilities and their impact; proficiency automating and orchestrating solutions to manual processes
- Proficiency in popular automation tools and platforms
- Proficiency in programming & scripting languages such as Java, C#, Python, PowerShell, Bash and experience in using APIs of various solutions.
- Good understanding of cloud architectures (Azure, AWS, GCP) and the security implications of cloud-based infrastructure.
- Proficiency in data analysis and reporting tools (Excel, Power BI) to support vulnerability management reporting.
- Experience providing proactive guidance regarding platform optimization.
- Skilled in SME assistance and oversight into platform maintenance and upgrade work.
- Ability to develop, maintain, and document workflow processes to ensure data & system controls are adequate, meet internal baselines and optimize current processes to meet emerging risks
- Experience generating vulnerability data health checks to ensure completeness and accuracy
- Assist with vulnerability report generation for scheduled and ad-hoc requests
- Ensure strong oversight of vulnerability scanning schedule
Preferred:
- Knowledge of Deloitte Global, Member Firms, and the businesses
- Skilled in configuring and managing Attack Surface Management tools such as CyCognito.
- Professional IT or Security management certification, at least one or more of CISSP, CCSP, CRISC, CISM, GIAC, OSCP, Security+, CEH, etc.
- Knowledge and experience of OWASP Top 10, SANS Secure Programming, Security Engineering Principles
- Familiarity with application, server, and network security is preferred; understanding of security architectures, network security, Active Directory, least privilege, etc Strong leadership and mentorship skills, with the ability to work collaboratively with cross-functional teams.
- Ability to work on multiple projects, manage multiple tasks, re-prioritize workload as demands change.
- Detail oriented, with proven ability to challenge and identify opportunities within existing processes and business practices.
Our culture
At Deloitte Global people are valued and respected for who they are – with opportunities to bring their unique perspectives, talents and passions to business challenges. Our global workspace creates room for individuality and collaboration. Ours is an inclusive, supportive, connected culture with a focus on development, flexibility, and well-being. This culture makes Deloitte Global one of the most rewarding places to work, and to transform your career.
Professional development
From entry-level employees to senior leaders, we believe in investing in you, helping you identify and hone your unique strengths at every step of your career. We offer opportunities to build new skills, take on leadership opportunities, and connect and grow through mentorship. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their career.
Benefits
At Deloitte, we value our people and offer employees a broad range of benefits. Our Total Rewards program reflects our continued commitment to lead from the front in everything we do—that’s why we take pride in offering a comprehensive variety of programs and resources to support your health and well-being.
Recruiting for this role ends on October 2, 2025.
At Deloitte Global, we know we’re at our best when we look out for one another; prioritize respect, fairness, development and wellbeing; foster an inclusive culture and embrace diversity in all forms. All qualified applicants will receive consideration for employment regardless of their background, experience, identity, ability or thinking style, and if you need assistance or an accommodation during the application process for accessibility reasons this is available upon request. The preferred candidate will be subject to background screening by Deloitte or by their external third-party provider.
October 2, 2025
120300
200600
107900
179900
97600
162800