Technical Consultant-Threat Detection Content & Administration

International Business Machines Corporation; Maharashtra; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

IBM Consulting in India is seeking a Technical Consultant for Threat Detection Content & Administration. You will manage security technology infrastructure, including SIEM, SOAR, EDR, AV, and cloud controls, and develop use cases, rules, and security policy recommendations to keep environments safe.

You will analyze activity with MITRE ATT&CK, tune controls, evaluate risk using NIST, and contribute to policy development.

Qualifications

• Experience in managing and maintaining security technology infrastructure (SIEM/SOAR/EDR/AV).
• Ability to develop and recommend security policies and runbooks.
• Familiarity with MITRE ATT&CK framework for attack classification.
• Experience tuning and optimizing security controls for threat detection.
• Knowledge of NIST framework for risk evaluation and mitigation.

Responsibilities

• Manage Security Infrastructure: maintain security tech infrastructure and deploy use cases and rules.
• Analyze System Activity: translate activity and indicators of compromise using MITRE ATT&CK.
• Develop Security Policy: create policy recommendations for SIEM, EDR, anti-malware, and logging.
• Optimize Security Controls: tune SIEM, SOAR, EDR, AV, and cloud controls for detection.
• Evaluate Risk: assess threats using the NIST framework and provide mitigation steps.

Skills

Security Infra Mgmt

Threat Analysis

Policy Development

Control Optimization

Risk Mitigation

Education

Master's Degree

Job description

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You'll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you'll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You'll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your Role And Responsibilities

As a Technical Consultant in Threat Detection Content & Administration, you will manage and maintain security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls. You will develop and deploy use cases, rules, and security policy recommendations to ensure efficient infrastructure functionality.

Your Primary Responsibilities Will Include

• Manage Security Infrastructure: Manage and maintain security technology infrastructure, ensuring that systems are patched, upgraded, and functioning efficiently. This includes developing use cases, rules, and run books, and deploying them to the client environment.
• Analyze System Activity: Analyze and translate system and network activity, indicators of compromise, and attacker tactics to identify malicious activity, applying the MITRE ATT&CK framework to classify attacks and assess risk.
• Develop Security Policy: Develop and recommend security policy based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.
• Optimize Security Controls: Tune and optimize security controls, including SIEM, SOAR, EDR, AV, and Cloud security controls, to ensure efficient threat detection and response.
• Evaluate Risk: Evaluate the risk of threats using the NIST Cybersecurity framework and provide recommendations to mitigate identified risks.

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Security Technology Infrastructure Management: Experience with managing and maintaining security technology infrastructure, including SIEM, SOAR, EDR, AV, and Cloud security controls, ensuring systems are patched, upgraded, and functioning efficiently.
• Threat Analysis and Mitigation: Experience with analyzing and translating system and network activity, indicators of compromise, and attacker tactics to identify malicious activity, utilizing frameworks such as MITRE ATT&CK for attack classification and risk assessment.
• Security Policy Development: Experience with developing and recommending security policy based on expertise in Security Incident & Event Management (SIEM), Endpoint Detection and Response technology, anti-malware, anti-spam, network security technologies, and general user and network activity logging policies.
• Security Control Optimization: Experience with tuning and optimizing security controls, including SIEM, SOAR, EDR, AV, and Cloud security controls, to ensure efficient threat detection and response.
• Risk Evaluation and Mitigation: Experience with evaluating the risk of threats using the NIST Cybersecurity framework and providing recommendations to mitigate identified risks.

Preferred Technical And Professional Experience

• Proficiency in NIST Framework: Experience with utilizing the NIST Cybersecurity framework to evaluate the risk of threats and provide recommendations to mitigate identified risks.
• MITRE ATT&CK Framework Knowledge: Experience with applying the MITRE ATT&CK framework to classify attacks, identify attack attribution, and assess risk.
• Cloud Security Controls Expertise: Experience with managing and maintaining cloud security controls to ensure efficient threat detection and response.