Offensive Security Manager

Your role

This is NOT a purely hands-on hacker role. Were looking for someone with solid technical experience in attack surfaces exposures and tooling who is equally interested in client-facing consulting and managing this role you will lead and contribute to client engagements coordinate endtoend delivery and translate technical findings into clear businessrelevant advice for stakeholders. While you will still be involved in delivery activities your primary focus will be to:

• Help coordinate our Attack Surface Management projects and workstreams
• Drive project execution and ensure highquality outcomes
• Help stakeholders understand impact and prioritize remediation actions

This is an ideal opportunity for an experienced ASM specialist who wants to move into a leadership path owning client relationships guiding teams and shaping how ASM is delivered and evolved.

You wont be working alone you will collaborate with our global and local teams of cyber professionals who bring a balanced mix of technical legal and business expertise to support you.

What Youll Actually Do:

• Lead and execute ASM engagements (e.g. external attack surface assessments penetration testing red teaming vulnerability management): Define scope plan activities manage timelines and resources and act as the main point of contact for clients
  • Lead the design implementation and day-to-day management of project activities (e.g. facilitating workshops and status meetings) across client environments ensuring stakeholders are aligned and informed throughout the engagement
  • Actively participate in the delivery of the projects depending on their size and scope
• Translate technical findings into business-relevant insights: Analyse exposures and misconfigurations in the context of the clients architecture processes and business priorities
  • Communicate risk posture prioritise issues based on impact and likelihood and frame them in a way that supports decision-making by both technical and non-technical stakeholders
• Advise coordinate and oversee delivery: Review and validate outputs focusing on what matters most for the clients risk profile and environment
  • Provide pragmatic recommendations on how to reduce the external attack surface enhance controls and improve processes to identify vulnerabilities rogue assets and exposure trends
  • Help clients integrate ASM outputs into their broader vulnerability management SOC/Threat Intelligence and incident response capabilities
• Build and nurture long-term relationships with stakeholders and clients by collaborating closely to understand their business needs and ensuring all engagements meet the highest quality standards
  • Support proposal development including responding to RFPs and contributing to business development activities related to potential projects and engagements
• Contribute to offering development: Refine our ASM methodologies tooling and accelerators capture lessons learned from engagements and help shape our gotomarket narrative and reusable assets

Why Deloitte

Deloitte employs 35000 dedicated cyber practitioners worldwide. We serve the biggest and most innovative companies across the globe as well as locally in Finland solving complex problems achieving remarkable goals and making meaningful progress. We refer to ourselves as cyber leaders strategists advisors hackers and specialists.

Create your own growth and development path based on your background and desired career goals with the help of your career coach. As the undisputed leader in professional services Deloitte is where youll find unrivaled opportunities to:

• Contribute to the latest thought-leadership and industry research relating to cyber security
• Participate grow and develop in other cyber security projects to realize your full potential

At Deloitte we value every individual and prioritise feedback and coaching at all stages of your career. Our career development opportunities help you build the skills and capabilities you need to succeed and progress in your career

We have a flat hierarchy that is built around the strengths of our deloittees. We make a positive impact on each other our clients and society through our significant client projects

We work with a hybrid working model and aim to offer flexibility to our employees. We value face-to-face collaboration and learning at our modern office in Ruoholahti while also providing opportunities for remote work

Qualifications :

What we are looking for:

You are passionate about technology particularly in the realm of securing IT environments and are committed to continuously expanding your knowledge. With 4 - 6 years of cybersecurity experience ideally in a consulting capacity you possess some of the following skills:

Technical skills:

• Extensive experience in vulnerability management penetration testing red teaming application security or similar technical cybersecurity roles
• Solid understanding of what organizations attack surfaces may consist of and typical exposure patterns
• Experience conducting/delivering/presenting security posture analysis/assessments
• Experience designing or managing ASM programs
• Knowledge of relevant security frameworks standards and regulations (e.g. TIBER-FI/EU OWASP MITRE DORA ISO 27001 NIST)
• While not mandatory relevant certifications or strong desire to accomplish one can be an advantage (e.g. OSCP OSEP OSED OSEE CRTO CRTL CRTE CCRTS/CCSAS CISSP). It is also seen as a plus if you have presented at security conferences or written technical blogs and whitepapers.

Soft skills:

• Ability to make complex analysis and communicate it in a concise and clear manner appropriately tailored to people from a very wide range of cultures technical backgrounds and seniorities
• Ability to work independently and as part of a team with good coaching skills to support the professional development of junior colleagues
• Experience planning and leading project type work in an effective way
• Continuous learning mindset and willingness to stay updated with industry trends evolving technologies and threats
• You get satisfaction from helping organizations whilst forming and maintaining long-term business partnerships/relationships requiring effective interpersonal skills

Requirements:

• Fluency in English and in Finnish both oral and written
• You are required to be currently located in Finland possess a valid residence permit and eligibility for security clearance (turvallisuusselvitys). We are currently not considering candidates requiring relocation

Additional Information :

We look forward to receiving your application!

 When: Apply latest by Wednesday 2nd of August please note that we are ready to start interviews already during the application period especially now with quickly approaching summer holidays!

 How: Please submit your application through our recruitment system. Be sure to include your CV and cover your cover letter please tell us what interests you about the role and what kind of colleague you would be

 Questions about the role: If you have any questions about the position team or Deloitte as an employer Kamil Lewandowski will be happy to answer. You can reach Kamil on Wednesday 8.7. between 9-10 or Monday 13.7. between 15-16.

 Questions about the recruitment process: You can read more about us and our recruitment process on our website. If you did not find the answer you were looking for please contact our recruitment team at

 Get to know Deloitte: Look into our everyday life and discover more about us on LinkedIn TikTok Instagram and Facebook

Not quite your role Dont hesitate to leave an open application on our website you might be a perfect fit for another open role in our cyber team!

Together makes progress

At Deloitte we value diverse skills perspectives and experiences as they enable us to effectively solve complex challenges for our clients. We encourage you to apply for the position if you believe your skills can contribute to our teams success.

You will have the opportunity to work alongside over 450000 colleagues globally and nearly 900 colleagues in Finland across Audit & Assurance Tax & Legal and Consulting services. At Deloitte its all about people each with something special to offer. We collaborate closely with one another and with our clients making great things happen. Thats how we create real change.

Deloitte is where youll find unlimited opportunities to succeed and realise your full potential together.

Remote Work :

No

Employment Type :

Full-time