Cyber Threat Detection & Response Consultant

IBM; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

IBM Consulting invites a Technical Consultant: Threat Detection, Response & Intelligence to safeguard client digital infrastructure. You will identify, analyze, and mitigate cyber threats using SIEM, SOAR, EDR, and XDR, guiding incident response and security enhancements.

With expertise in MITRE ATT&CK and the Cyber Kill Chain, you will translate findings into concrete client recommendations across Windows, macOS, and Linux environments, contributing to risk reduction and resilience.

Qualifications

• Exposure to cybersecurity tools including SIEM, SOAR, EDR, and XDR.
• Understanding of MITRE ATT&CK and Cyber Kill Chain to counter adversary tactics.
• Experience interpreting logs from Windows, MAC, and Linux to identify threats.
• Exposure to vulnerability management and cyber threat intelligence activities.
• Certification in security technologies related to threat detection, response, and intelligence.

Responsibilities

• Conduct Event Investigations using SIEM, SOAR, EDR, and XDR platforms; apply MITRE ATT&CK and Cyber Kill Chain.
• Manage Incident Reports with actionable recommendations to strengthen security posture.
• Analyze Network and Endpoint Events from Windows, MAC, and Linux systems.
• Engage in Vulnerability Management and cyber threat intelligence activities.
• Provide actionable recommendations to enhance client security posture.

Skills

Cybersecurity tools

MITRE ATT&CK

Cyber Kill Chain

Network & Endpoint analysis

Vulnerability management

Threat intelligence platforms

Scripting languages (Python, PowerShel

Education

Bachelor's Degree

Master's Degree

Tools

SIEM

SOAR

EDR

XDR

Job description

IBM Consulting invites a Technical Consultant: Threat Detection, Response & Intelligence to safeguard client digital infrastructure. You will identify, analyze, and mitigate cyber threats using SIEM, SOAR, EDR, and XDR, guiding incident response and security enhancements.

With expertise in MITRE ATT&CK and the Cyber Kill Chain, you will translate findings into concrete client recommendations across Windows, macOS, and Linux environments, contributing to risk reduction and resilience.