Technical Consultant-Threat Detection Response & Intelligence

International Business Machines Corporation; Mumbai; In loco; INR 2.500.000 - 5.500.000; Tempo pieno

Descrizione del lavoro

IBM India is seeking a Technical Consultant: Threat Detection Response & Intelligence to safeguard clients by identifying, analyzing, and mitigating cyber threats using SIEM, SOAR, EDR, and XDR tools. You will conduct event investigations, manage incident reports, analyze Windows/Mac/Linux logs, participate in vulnerability management, and provide actionable recommendations to strengthen security posture.

Required education: Bachelor's; Preferred: Master's. Years of experience: 14-17.

Competenze

• Bachelor's degree required in a related field.
• Master's degree preferred.
• Experience with SIEM, SOAR, EDR, and XDR platforms.
• Knowledge of MITRE ATT&CK and Cyber Kill Chain.
• Experience analyzing Windows, macOS, and Linux logs.

Mansioni

• Conduct event investigations using security platforms to identify threats.
• Prioritize and manage incident reports with actionable recommendations.
• Analyze network and endpoint events across Windows, macOS, Linux.
• Participate in vulnerability management and threat intelligence activities.
• Provide recommendations to strengthen client security posture.

Conoscenze

Cybersecurity tools exposure

Frameworks application

Network & endpoint analysis

Vulnerability management

Security incident response

Formazione

Bachelor's degree

Master's degree

Strumenti

SIEM

SOAR

EDR

XDR

Descrizione del lavoro

Your Role and Responsibilities:

As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.

Your Primary Responsibilities Will Include:

• Conduct Event Investigations: Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms to identify and analyze potential threats. Apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Manage Incident Reports: Prioritize and manage incident reports, providing actionable recommendations and responses to strengthen the client's security posture.
• Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
• Engage in Vulnerability Management: Participate in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture and mitigate potential threats.

Required Education:

Bachelor's Degree

Preferred Education:

Master's Degree

Required Technical and Professional Expertise:

• Exposure to Cybersecurity Tools: Experience with a variety of cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Industry Frameworks Application: Experience with industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Network and Endpoint Analysis: Experience with interpreting security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
• Vulnerability Management: Experience with vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Security Incident Response: Experience with conducting event investigations, managing incident reports, and providing actionable recommendations and responses to strengthen security posture.

Preferred Technical and Professional Experience:

• Deep Understanding of Network Fundamentals: Experience with network protocols, devices, and architectures is beneficial for identifying potential security threats and analyzing network events.
• Familiarity with Cloud Security: Exposure to cloud security platforms and technologies can enhance the ability to monitor, prioritize, investigate, and respond to security incidents in cloud-based environments.
• Knowledge of Scripting Languages: Familiarity with scripting languages such as Python, PowerShell, or Bash can aid in automating tasks, analyzing data, and creating custom tools for threat detection and response.

Years of Experience: 14 - 17