Threat Detection & Incident Response Consultant

IBM; Boston (MA); Presencial; USD 120.000 - 170.000; Jornada completa

Descripción de la vacante

IBM in Boston is seeking a Technical Consultant focusing on Threat Detection, Response & Intelligence to safeguard client networks by identifying, analyzing, and mitigating cyber threats using a broad set of security tools.

You will investigate incidents with SIEM, SOAR, EDR, and XDR, apply MITRE ATT&CK and Cyber Kill Chain to counter adversaries, prioritize incident reports, and analyze Windows, macOS, and Linux logs to identify threats.

Formación

• Experience investigating security incidents using SIEM, SOAR, EDR and XDR platforms.
• Familiarity with MITRE ATT&CK framework and Cyber Kill Chain.
• Experience analyzing Windows, macOS and Linux logs.

Responsabilidades

• Conduct Event Investigations using SIEM, SOAR, EDR, and XDR platforms.
• Manage Incident Reports with actionable recommendations.
• Analyze Network and Endpoint Events from Windows, MAC, and Linux systems.
• Engage in Vulnerability Management and cyber threat intelligence activities.
• Provide actionable recommendations to clients to enhance security posture.

Conocimientos

SIEM

SOAR

EDR

XDR

MITRE ATT&CK

Cyber Kill Chain

Threat Analysis

Herramientas

Windows

macOS

Linux

Descripción del empleo

IBM in Boston is seeking a Technical Consultant focusing on Threat Detection, Response & Intelligence to safeguard client networks by identifying, analyzing, and mitigating cyber threats using a broad set of security tools.

You will investigate incidents with SIEM, SOAR, EDR, and XDR, apply MITRE ATT&CK and Cyber Kill Chain to counter adversaries, prioritize incident reports, and analyze Windows, macOS, and Linux logs to identify threats.