Technical Consultant-Threat Detection Response & Intelligence

Introduction

A career in IBM Consulting is grounded in long-term client partnerships and close collaboration across the globe. You’ll work with leading organizations in multiple industries, supporting their hybrid cloud and AI initiatives. Backed by strategic partners, IBM technology, and Red Hat, you’ll gain the capabilities to drive meaningful change and speed up measurable client outcomes. At IBM Consulting, curiosity is a driver of success—you’ll be encouraged to challenge the norm, pursue new ideas, and build innovative solutions that deliver tangible results. Our growth and empathy-focused culture emphasizes long-term career development, while recognizing and valuing your individual skills and experiences.

Your Role And Responsibilities

As a Technical Consultant: Threat Detection Response & Intelligence, you are essential to protecting an organization’s digital infrastructure by identifying, analyzing, and mitigating cyber threats. The role relies on industry frameworks and a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.

Your Primary Responsibilities Will Include

• Conduct Events Investigation: Investigate security incidents using multiple cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to uncover and analyze potential threats. Use industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain to effectively understand and counter adversary tactics.
• Manage Incident Reports: Create and maintain incident reports, delivering actionable recommendations and responses to strengthen clients’ security posture. Work with clients to implement actions that help prevent future incidents.
• Analyze Network and Endpoint Events: Review and interpret security tools and logs from Windows, MAC, and Linux systems to detect potential security threats. Build a thorough understanding of network and endpoint events to guide incident response efforts.
• Engage in Vulnerability Management: Support vulnerability management activities to identify and address potential security vulnerabilities. Remain current on emerging threats and evolving technologies to anticipate potential risks.
• Provide Cyber Threat Intelligence: Collect and analyze cyber threat intelligence to support incident response strategies and enhance clients’ overall security posture.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Experience with Cybersecurity Tools: Demonstrated ability to use a range of cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Industry Frameworks Application: Experience applying industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Network and Endpoint Analysis: Capability to interpret security tools and logs from Windows, MAC, and Linux environments to identify potential security threats.
• Vulnerability Management: Experience conducting vulnerability management activities to identify and remediate potential security vulnerabilities.
• Cyber Threat Intelligence: Knowledge of collecting and analyzing cyber threat intelligence to support incident response strategies and improve clients’ overall security posture.
  
  

Preferred Technical And Professional Experience

• Deep Understanding of Emerging Threats: Experience staying current with emerging threats and evolving technologies to anticipate potential threats and strengthen clients’ overall security posture.
• Advanced Cybersecurity Tool Expertise: Exposure to a broad set of cybersecurity tools and technologies, supporting the creation of innovative solutions to complex security problems.
• Continuous Learning and Adaptation: Experience with continuous learning and adaptation in cybersecurity, enabling effective response to new threats and technologies.