About this role

Vulnerability Management Specialist

What impact will you make?

#YourOpportunity

Ready to help organizations strengthen their vulnerability management programs? Want to be a trusted security expert, turning thousands of scan findings into a clear, prioritized plan that measurably reduces risk? Want to be backed by talented security professionals who are passionate about offensive security, threat intelligence, and cyber resilience? Join a world-class organization that invests in your growth and offers an inclusive, collaborative culture where your contributions are felt from day one.

We are currently seeking an experienced, self-driven Vulnerability Management Specialist with a strong foundation in IT infrastructure and information security to join our Cyber Security team. As part of a global cyber network, our specialists help clients across Greece and internationally — from energy and utilities companies to regulated financial institutions — identify, prioritize, and remediate security weaknesses across their IT and cloud estates.

In this role, you will contribute to client engagements across vulnerability management, with the backing of our penetration testing and red team specialists and access to global knowledge exchange and continuous training — building a career path toward vulnerability management leadership, security advisory, penetration testing, or security architecture.

#YourRole

Your role as a Vulnerability Management Specialist will place you at the heart of cyber risk reduction efforts. You will run the program independently on a day-to-day basis, working directly with IT, security, and management teams, making sound risk-based decisions and knowing when to escalate. This is a position of real ownership and visibility, for someone who is comfortable standing on their own in demanding enterprise environments.

As a Vulnerability Management Specialist, you will :

- Lead vulnerability management activities on client engagements and work directly with IT, security, and management stakeholders, taking ownership of day-to-day delivery
- Own the end-to-end vulnerability management lifecycle: asset discovery, scanning, analysis, prioritization, remediation tracking, and verification
- Plan, configure, and execute authenticated and unauthenticated vulnerability scans across on-premises, cloud, and hybrid IT environments using enterprise-grade platforms
- Analyze and validate findings, eliminating false positives and assessing real-world exploitability
- Prioritize vulnerabilities based on risk, combining CVSS, EPSS, CISA KEV, threat intelligence, and asset criticality
- Drive remediation with asset owners and IT teams, managing SLAs, exceptions, and risk acceptances in line with client policies — and challenging stakeholders constructively where needed
- Produce clear technical reports, dashboards, and KPIs, and present status and risk posture to client management and governance forums
- Assess and mature clients’ vulnerability management programs in line with relevant standards and regulations, such as ISO 27001, NIST CSF, CIS Controls, NIS2, and DORA
- Respond to critical and zero-day vulnerability disclosures, rapidly assessing client exposure and coordinating emergency remediation
- Collaborate with our penetration testing and red team colleagues, and develop automation (scanner APIs, ticketing workflows) to improve efficiency

#WinningRequirements

To qualify for the role, you must have:

- Bachelor’s degree in Information Security, Computer Science, Information Technology, or any related discipline
- Minimum 3 years of hands-on experience in vulnerability management, security operations, or infrastructure security, including running a vulnerability management program or significant parts of one
- Proven ability to work autonomously in client-facing or enterprise environments, owning deliverables and stakeholder relationships without day-to-day supervision
- Hands-on administration of at least one enterprise scanning platform such as Tenable (Nessus, Tenable.io/.sc), Qualys, Rapid7 InsightVM, or Microsoft Defender Vulnerability Management — including scan policies, credentialed scanning, agents, and reporting
- Solid understanding of networking, Windows and Linux environments, Active Directory, patch management, and hardening principles (e.g. CIS Benchmarks)
- Strong working knowledge of vulnerability scoring and intelligence sources: CVE, CVSS, EPSS, and CISA KEV
- Confidence to influence and challenge IT teams and asset owners, translating technical findings into business risk for both technical and executive audiences
- Excellent written and verbal communication skills in Greek and English
- Military obligations fulfilled where applicable
Ideally:
- CompTIA Security+ or CySA+, or an equivalent security certification
- Hands-on penetration testing exposure or certifications such as eJPT, OSCP, or CEH
- Experience in critical infrastructure or regulated sectors such as energy, utilities, or financial services
- Experience with cloud platforms (AWS, Azure, GCP) and cloud-native security concepts such as CSPM, CWPP, and container and Kubernetes security
- Experience with cloud security and exposure management platforms such as Wiz and Cyclops
- Experience with ITSM and ticketing platforms such as ServiceNow or Jira for remediation workflows
- Scripting skills (Python, PowerShell, Bash) for automation and scanner API integrations

#ChooseDeloitteif:

- You want to work with inspiring, ambitious, and supportive people with diverse geographical and academic backgrounds and extensive skills.
- You get excitement in managing clients shifting priorities and accomplish tasks in a challenging, fast-paced environment.
- You like to nurture people and share your knowledge with others.

#AboutDeloitte

Our services

Deloitte offers Global professional services that include Audit, Risk Advisory, Tax, Consulting and Financial Advisory. Our approach combines insight and innovation from multiple disciplines with global business and industry expertise to help our clients excel anywhere in the world.

We deliver outstanding impact on the reputation and success of our clients, in Greece and globally. In pursuing this we contribute to a sustainable and prosperous society, and are firm believers in the positive impact business can and should have on the world it operates within.

Our Purpose

Our purpose, “To make an impact that matters for our clients, our people and society “- defines who we are and what we stand for. This is not about size, it's about being the first choice. The first choice for the largest and most influential clients, and the first choice for the best talent.

Our values

At Deloitte we foster a collaborative culture where talented individuals can produce their best work. We value innovative thinking, diverse insights and a genuinely distinctive level of customer service. We value difference, with respect at the heart of our inclusive culture, and we support agile working arrangements.

Our talent experience

From day one at our firm, practitioners are part of a community. Our development and career progression framework will help them develop the skills and capabilities to succeed. The wellness of our people and the ability to offer agile working arrangements is at the centre of our unique talent experience. We create a workplace that encourages collaboration, creativity, inclusiveness to ensure our staff are supported, encouraged, and feel a sense of purpose and meaning in what they do each day.

Sounds like the sort of role for you? Apply now.

This document has been prepared by Deloitte Business Solutions Societe Anonyme of Business Consultants, Deloitte Certified Public Accountants Societe Anonyme and Deloitte Alexander Competence Center Single Member Societe Anonyme of Business Consultants.

Deloitte Business Solutions Societe Anonyme of Business Consultants, a Greek company, registered in Greece with registered number 000665201000 and its registered office at Marousi Attica, 3a Fragkokklisias & Granikou str., 151 25, Deloitte Certified Public Accountants Societe Anonyme, a Greek company, registered in Greece with registered number 0001223601000 and its registered office at Marousi, Attica, 3a Fragkokklisias & Granikou str., 151 25 and Deloitte Alexander Competence Center Single Member Societe Anonyme of Business Consultants, a Greek company, registered in Greece with registered number 144724504000 and its registered office at Thessaloniki, Municipality of Pylaia - Chortiatis of Thessaloniki, Vepe Technopolis Thessaloniki (5th and 3rd street), are one of the Deloitte Central Mediterranean S.r.l. (“DCM”) countries. DCM, a company limited by guarantee registered in Italy with registered number 09599600963 and its registered office at Via Tortona no. 25, 20144, Milan, Italy is one of the Deloitte NSE LLP geographies. Deloitte NSE LLP is a UK limited liability partnership and member firm of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms and their related entities (collectively, the “Deloitte organization”). DTTL (also referred to as “Deloitte Global”) and each of its member firms and related entities are legally separate and independent entities, which cannot obligate or bind each other in respect of third parties. DTTL and each DTTL member firm and related entity is liable only for its own acts and omissions, and not those of any of each other. DTTL does not provide services to clients. Please see www.deloitte.com/ about to learn more.

DTTL, Deloitte NSE LLP and Deloitte Central Mediterranean S.r.l. do not provide services to clients. Please see www.deloitte.com/about to learn more about our global network of member firms.

Deloitte is a leading global provider of audit and assurance, consulting, financial advisory, risk advisory, tax and related services. Our global network of member firms and related entities in more than 150 countries and territories serves four out of five Fortune Global 500 ℜ g; companies. Learn how Deloitte’s approximately 312,000 people make an impact that matters at www.deloitte.com.

This communication contains general information only, and Deloitte Business Solutions Societe Anonyme of Business Consultants, Deloitte Certified Public Accountants Societe Anonyme and Deloitte Alexander Competence Center Single Member Societe Anonyme of Business Consultants, is not, by means of this communication, rendering professional advice or services. Before making any decision or taking any action that may affect your finances or your business, you should consult a qualified professional adviser. No entity in the Deloitte organization shall be responsible for any loss whatsoever sustained by any person who relies on this communication. Deloitte organization refers to Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms and their related entities collectively.