Technical Consultant-Threat Detection Response & Intelligence

Introduction

A career at IBM Consulting is grounded in enduring client relationships and close collaboration across the globe. You’ll work with leading organizations in multiple industries, supporting their hybrid cloud and AI strategies. Backed by strategic partners, IBM technology, and Red Hat, you’ll be equipped to drive meaningful change and accelerate client outcomes. At IBM Consulting, curiosity powers performance. You’ll be encouraged to challenge conventional approaches, test new ideas, and develop solutions that produce tangible results. Our growth and empathy-focused culture supports long-term career development, while recognizing and valuing your individual skills and experiences.

Your Role And Responsibilities

As a Technical Consultant: Threat Detection Response & Intelligence, you will help protect an organization’s digital infrastructure by identifying, analyzing, and mitigating cyber threats. The role relies on a range of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.

Your Primary Responsibilities Will Include

• Conduct Event Investigations: Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms to identify and analyze potential threats. Use industry frameworks including MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Manage Incident Reports: Prioritize and oversee incident reports, delivering actionable recommendations and responses to help strengthen the client’s security posture.
• Analyze Network and Endpoint Events: Review and interpret security tools and logs from Windows, MAC, and Linux environments to identify potential security threats.
• Engage in Vulnerability Management: Support vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Provide Actionable Recommendations: Recommend and respond to clients with guidance to improve their security posture and mitigate potential threats.
  
  

Preferred Education

Master's Degree

Required Technical And Professional Expertise

• Exposure to Cybersecurity Tools: Experience using a range of cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Industry Frameworks Application: Experience applying industry frameworks such as MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Network and Endpoint Analysis: Experience interpreting security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
• Vulnerability Management: Experience in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
• Security Incident Response: Experience performing event investigations, managing incident reports, and providing actionable recommendations and responses to strengthen security posture.
  
  

Preferred Technical And Professional Experience

• Deep Understanding of Network Fundamentals: Experience with network protocols, devices, and architectures is beneficial for identifying potential security threats and analyzing network events.
• Familiarity with Cloud Security: Exposure to cloud security platforms and technologies can improve the ability to monitor, prioritize, investigate, and respond to security incidents in cloud-based environments.
• Knowledge of Scripting Languages: Familiarity with scripting languages such as Python, PowerShell, or Bash can support automating tasks, analyzing data, and building custom tools for threat detection and response.