TS/SCI Cyber Defense & IR Analyst

IBM; Jasper (AL); On-site; USD 85,000 - 125,000; Full time

Benefits offered by this job

Healthcare benefits

401(k) plan

Paid time off

Parental bonding leave

Training & certifications

Job summary

IBM Consulting in the United States is seeking a Technical Operations Analyst to safeguard client digital infrastructure by identifying, analyzing, and mitigating cyber threats. You will use SIEM, SOAR, EDR, and XDR platforms to monitor, investigate, and respond to security incidents.

Your role includes incident investigations, incident report management, and analysis of Windows, MAC, and Linux logs. You will participate in vulnerability management and threat intelligence activities to

Qualifications

• Exposure to a variety of cybersecurity tools for monitoring, prioritizing, and responding to incidents.
• Knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks to counter adversary tactics.
• Ability to interpret Windows, MAC, and Linux logs to identify threats.
• Participation in vulnerability management and threat intelligence activities.

Responsibilities

• Conduct Event Investigations using SIEM, SOAR, EDR, and XDR platforms, following MITRE ATT&CK/Cyber Kill Chain.
• Manage incident reports and provide actionable responses to strengthen security posture.
• Analyze Network and Endpoint events from Windows, MAC, and Linux systems.
• Engage in Vulnerability Management and threat intel activities to anticipate threats.
• Provide Actionable Recommendations to clients to improve security.

Skills

SIEM

SOAR

EDR

XDR

MITRE ATT&CK

Cyber Kill Chain

Windows Logs

MAC Logs

Linux Logs

Vuln Management

Threat Intelligence

TS/SCI Clearance

IAT Level II

Education

High School Diploma

Bachelor’s Degree

Tools

Security Certifications

Job description

IBM Consulting in the United States is seeking a Technical Operations Analyst to safeguard client digital infrastructure by identifying, analyzing, and mitigating cyber threats. You will use SIEM, SOAR, EDR, and XDR platforms to monitor, investigate, and respond to security incidents.

Your role includes incident investigations, incident report management, and analysis of Windows, MAC, and Linux logs. You will participate in vulnerability management and threat intelligence activities to