Cyber Security Incident Response & Forensics Analyst

IBM; Winchester; On-site; GBP 65,000 - 95,000; Full time

Job summary

IBM is seeking a Cyber Security Incident Response Analyst to join the CSIRT team. You will conduct highly technical and confidential investigations into data loss, APTs, malware, and other cyber incidents, triaging and examining various digital media in a heterogeneous environment.

You will report findings, coordinate with client teams, and help shape IBM threat landscape; weekend on-call shifts may be scheduled.

Qualifications

• Bachelor's Degree required.
• Experience conducting forensic investigations and data handling.
• Ability to analyze network traffic and log data for indicators of compromise.

Responsibilities

• Conduct forensic investigations and analysis for cyber incidents reported to CSIRT.
• Triage and examine digital media in diverse environments to determine containment/remediation actions.
• Prepare findings and reports for clients and stakeholders.

Skills

Forensic analysis

Network analysis

Log review

EDR monitoring

X-Ways

Encase

SIFT

Education

Bachelor's Degree

Tools

X-Ways

EnCase

SIFT

Plaso

Job description

IBM is seeking a Cyber Security Incident Response Analyst to join the CSIRT team. You will conduct highly technical and confidential investigations into data loss, APTs, malware, and other cyber incidents, triaging and examining various digital media in a heterogeneous environment.

You will report findings, coordinate with client teams, and help shape IBM threat landscape; weekend on-call shifts may be scheduled.