Senior Cyber Defender (TS/SCI) Threat Analytics

IBM; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

IBM Consulting is seeking an Expert Cyber Defender to protect a client’s digital infrastructure. You will analyze threats, coordinate incident response, and apply industry frameworks to mitigate risks.

This full-time role is based onsite at Fort Meade, MD, five days a week, and requires collaboration with cross-functional teams to strengthen security posture. You will leverage SIEM, SOAR, EDR, and XDR tools, conduct investigations, and produce actionable remediation guidance.

Qualifications

• Extensive threat analysis using MITRE ATT&CK and Cyber Kill Chain.
• Experience with SIEM, SOAR, EDR and XDR platforms.
• Ability to interpret Windows, MAC, Linux security data.
• Involvement in vulnerability management and threat intel.
• Cybersecurity certifications (e.g., CISSP) preferred.
• Government cyber operational experience in OPTEMO environments.

Responsibilities

• Investigate security incidents using SIEM/SOAR/EDR/XDR to identify threats.
• Develop and manage incident reports with actionable remediation steps.
• Analyze network and endpoint events across Windows, macOS and Linux.
• Engage in vulnerability management and threat intel activities.
• Provide expert guidance to enhance client security posture.

Skills

Threat analysis

Cybersecurity tools

Network & endpoint events

Vulnerability management

Cybersecurity certification

Government cyber operational exp

Education

Master's degree

Tools

SIEM

SOAR

EDR

XDR

Job description

IBM Consulting is seeking an Expert Cyber Defender to protect a client’s digital infrastructure. You will analyze threats, coordinate incident response, and apply industry frameworks to mitigate risks.

This full-time role is based onsite at Fort Meade, MD, five days a week, and requires collaboration with cross-functional teams to strengthen security posture. You will leverage SIEM, SOAR, EDR, and XDR tools, conduct investigations, and produce actionable remediation guidance.