Technical Consultant-Threat Detection Response & Intelligence

Introduction

A career at IBM Consulting is grounded in enduring client partnerships and worldwide collaboration. You’ll work with top organizations across industries, supporting their hybrid cloud and AI initiatives. Backed by strategic partners, IBM technology, and Red Hat, you’ll gain the capabilities to drive meaningful change and increase client impact. At IBM Consulting, curiosity drives success—you’ll be encouraged to question conventions, evaluate new concepts, and develop solutions that produce measurable outcomes. Our growth- and empathy-centered culture supports your long-term career development while recognizing the value of your individual skills and experiences.

Your Role And Responsibilities

As a Technical Consultant: Threat Detection Response & Intelligence, you will help protect an organization’s digital environment by identifying, analyzing, and reducing cyber threats. In this role, you will use multiple cybersecurity technologies to monitor, rank, investigate, and address security incidents.

Your Primary Responsibilities Will Include

• Conduct Event Investigations: Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms, applying industry models such as MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics.
• Manage Incident Reports: Review, prioritize, and oversee incident reports, delivering practical recommendations and responses to enhance the client’s security posture.
• Analyze Network and Endpoint Events: Review and interpret security tools and logs from Windows, MAC, and Linux environments to uncover potential threats.
• Engage in Vulnerability Management: Contribute to vulnerability management and cyber threat intelligence efforts to identify and anticipate potential threats.
• Provide Actionable Recommendations: Recommend and support security responses to clients with the goal of strengthening their security posture.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Exposure to Cybersecurity Tools: Working familiarity with a range of cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Understanding of Industry Frameworks: Knowledge of industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Experience with Network and Endpoint Analysis: Capability to interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats.
• Exposure to Vulnerability Management: Participation in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Certification in Security Technologies: Familiarity with security technologies and certifications relevant to threat detection, response, and intelligence.
  
  

Preferred Technical And Professional Experience

• Familiarity with Scripting Languages: Exposure to scripting languages such as Python, PowerShell, or Bash, supporting automation of tasks and integration with different cybersecurity tools.
• Knowledge of Cloud Security: Understanding cloud security concepts and prior experience with cloud-based security solutions can be beneficial for recognizing and reducing cyber threats.
• Exposure to Threat Intelligence Platforms: Familiarity with threat intelligence platforms and feeds to help stay current on emerging threats and strengthen incident response effectiveness.