Technical Consultant-Threat Detection Response & Intelligence

IBM; Chennai; In loco; INR 1.800.000 - 2.500.000; Tempo pieno

Descrizione del lavoro

International Business Machines Corporation in Chennai seeks a Technical Consultant for Threat Detection, Response & Intelligence to safeguard client networks by identifying and mitigating cyber threats.

You will investigate incidents using SIEM, SOAR, EDR, and XDR, applying MITRE ATT&CK and Cyber Kill Chain, and provide actionable security guidance to clients.

Competenze

• Bachelor's degree required.
• Master's degree preferred.
• Experience with SIEM, SOAR, EDR, and XDR platforms to monitor, prioritize, investigate, and respond to security incidents.
• Knowledge of MITRE ATT&CK and Cyber Kill Chain to counter adversary tactics.
• Familiarity with security analytics across Windows, macOS, and Linux environments.

Mansioni

• Conduct event investigations using SIEM, SOAR, EDR, and XDR platforms.
• Manage incident reports with actionable recommendations to strengthen security posture.
• Analyze network and endpoint events from Windows, macOS, and Linux systems.
• Engage in vulnerability management and threat intelligence activities.
• Provide actionable recommendations to clients to improve security.

Conoscenze

SIEM/SOAR/XDR

MITRE ATT&CK

Cyber Kill Chain

Logs analysis

Vuln management

Formazione

Bachelor's degree

Master's degree preferred

Strumenti

SIEM tools

Cloud security tooling

Descrizione del lavoro

Your Role and Responsibilities:

As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.

Your Primary Responsibilities Will Include:

• Conduct Event Investigations: Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms, and apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Manage Incident Reports: Prioritize and manage incident reports, providing actionable recommendations and responses to strengthen the client's security posture.
• Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats.
• Engage in Vulnerability Management: Participate in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture.

Required Education:

Bachelor's Degree

Preferred Education:

Master's Degree

Required Technical and Professional Expertise:

• Exposure to Cybersecurity Tools: Familiarity with a variety of cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Understanding of Industry Frameworks: Knowledge of industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Experience with Network and Endpoint Analysis: Ability to interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats.
• Exposure to Vulnerability Management: Participation in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Certification in Security Technologies: Familiarity with security technologies and certifications related to threat detection, response, and intelligence.

Preferred Technical and Professional Experience:

• Familiarity with Scripting Languages: Exposure to scripting languages such as Python, PowerShell, or Bash is beneficial for automating tasks and interacting with various cybersecurity tools.
• Knowledge of Cloud Security: Understanding cloud security principles and experience working with cloud-based security solutions can be advantageous in identifying and mitigating cyber threats.
• Exposure to Threat Intelligence Platforms: Familiarity with threat intelligence platforms and feeds can aid in staying up-to-date with emerging threats and improving incident response capabilities.

Years of Experience:3 - 8