Offensive Security Manager

Your role

This is NOT a purely “hands-on hacker” role. We’re looking for someone with solid technical experience in attack surfaces, exposures, and tooling, who is equally interested in client-facing consulting and managing delivery. In this role, you will lead and contribute to client engagements, coordinate end‑to‑end delivery, and translate technical findings into clear, business‑relevant advice for stakeholders. While you will still be involved in delivery activities, your primary focus will be to:

• Help coordinate our Attack Surface Management projects and workstreams
• Drive project execution and ensure high‑quality outcomes
• Help stakeholders understand impact and prioritize remediation actions

This is an ideal opportunity for an experienced ASM specialist who wants to move into a leadership path, owning client relationships, guiding teams, and shaping how ASM is delivered and evolved.

You won’t be working alone — you will collaborate with our global and local teams of cyber professionals, who bring a balanced mix of technical, legal, and business expertise to support you.

What You'll Actually Do:

• Lead and execute ASM engagements (e.g., external attack surface assessments, penetration testing, red teaming, vulnerability management): Define scope, plan activities, manage timelines and resources, and act as the main point of contact for clients
  • Lead the design, implementation, and day-to-day management of project activities (e.g., facilitating workshops and status meetings) across client environments, ensuring stakeholders are aligned and informed throughout the engagement
  • Actively participate in the delivery of the projects depending on their size and scope
• Translate technical findings into business-relevant insights: Analyse exposures and misconfigurations in the context of the client’s architecture, processes and business priorities
  • Communicate risk posture, prioritise issues based on impact and likelihood, and frame them in a way that supports decision-making by both technical and non-technical stakeholders
• Advise, coordinate and oversee delivery: Review and validate outputs, focusing on what matters most for the client’s risk profile and environment
  • Provide pragmatic recommendations on how to reduce the external attack surface, enhance controls and improve processes to identify vulnerabilities, rogue assets, and exposure trends
  • Help clients integrate ASM outputs into their broader vulnerability management, SOC/Threat Intelligence and incident response capabilities
• Build and nurture long-term relationships with stakeholders and clients by collaborating closely to understand their business needs and ensuring all engagements meet the highest quality standards
  • Support proposal development, including responding to RFPs and contributing to business development activities related to potential projects and engagements
• Contribute to offering development: Refine our ASM methodologies, tooling and accelerators, capture lessons learned from engagements, and help shape our go‑to‑market narrative and reusable assets

Why Deloitte?

🟢Deloitte employs 35,000+ dedicated cyber practitioners worldwide. We serve the biggest and most innovative companies across the globe as well as locally in Finland – solving complex problems, achieving remarkable goals, and making meaningful progress. We refer to ourselves as cyber leaders, strategists, advisors, hackers, and specialists.

🟢Create your own growth and development path based on your background and desired career goals with the help of your career coach. As the undisputed leader in professional services, Deloitte is where you’ll find unrivaled opportunities to:

• Contribute to the latest thought-leadership and industry research relating to cyber security
• Participate, grow and develop in other cyber security projects to realize your full potential

🟢 At Deloitte, we value every individual and prioritise feedback and coaching at all stages of your career. Our career development opportunities help you build the skills and capabilities you need to succeed and progress in your career

🟢 We have a flat hierarchy that is built around the strengths of our deloittees. We make a positive impact on each other, our clients, and society through our significant client projects

🟢 We work with a hybrid working model and aim to offer flexibility to our employees. We value face-to-face collaboration and learning at our modern office in Ruoholahti, while also providing opportunities for remote work