Security Specialist-Industrial Operation Technology Services

Introduction

A career in IBM Consulting is grounded in enduring client relationships and close collaboration with teams around the world. You will work with leading organizations across industries, helping them define their hybrid cloud and AI strategies. Backed by strategic partners, advanced IBM technology, and Red Hat, you’ll have the capabilities to drive meaningful change and enhance client outcomes. At IBM Consulting, curiosity drives success—you’ll be encouraged to challenge established norms, investigate new concepts, and build innovative solutions that produce tangible results. Our culture of growth and empathy supports your long-term career development while recognizing and valuing your individual skills and experiences.

Your Role And Responsibilities

As a Security Specialist in Industrial Operation Technology Services, you will focus on implementing and deploying security services for Industrial Control Systems (ICS). You will work with client IT, OT, and business leadership to help them understand potential ICS technology risks and vulnerabilities through workshops and assessments.

Your Primary Responsibilities Will Include

• Conduct Events Investigation: Perform in-depth investigations of security events to determine root causes and provide practical recommendations to strengthen the client’s OT security posture.
• Manage Incident Reports: Handle incident reports with accuracy and timeliness, delivering clear information to stakeholders and enabling effective incident response activities.
• Apply Industry Frameworks: Use industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain to analyze and counter adversary tactics effectively.
• Support Service Products: Apply technical expertise to support service products, using established assets and reference architectures to maintain the security and integrity of ICS technology.
• Provide Expertise: Offer ICS security expertise to clients by explaining potential risks and vulnerabilities and creating strategies to mitigate them.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Exposure to Industrial Control Systems: Familiarity with ICS technology and security concepts, including potential risks and vulnerabilities.
• Experience with Industry Frameworks: Knowledge of industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain, with the ability to apply them to understand and counter adversary tactics.
• Event Investigation Skills: Capability to conduct thorough investigations of security events to identify root causes and deliver actionable recommendations.
• Incident Response Experience: Exposure to managing incident reports, providing timely and accurate updates to stakeholders, and supporting incident response efforts.
• Technical Skills in ICS Security: Proficiency in using technical capabilities to support service products with assets and reference architectures, ensuring the security and integrity of ICS technology.
  
  

Preferred Technical And Professional Experience

• ICS Security Frameworks: Exposure to additional industry frameworks and standards relevant to ICS security, such as NIST Cybersecurity Framework or IEC 62443, would be beneficial for understanding and addressing potential risks and vulnerabilities.
• Advanced Threat Analysis: Familiarity with advanced threat analysis tools and methods, including threat hunting and anomaly detection, would strengthen the ability to identify and respond to sophisticated security threats.
• OT Security Technologies: Knowledge of OT security technologies, such as intrusion detection systems and security information and event management (SIEM) systems, would be advantageous in designing and implementing effective security solutions.