Cybersecurity Incident Response Forensics SME

IBM - Baltimore, MD

Full-time - Senior

Baltimore, MD

Computer and Electronic Product Manufacturing

About the position

The Cybersecurity Incident Response Forensics Subject Matter Expert (SME) role focuses on providing expert guidance and solutions in cybersecurity incident response and digital forensics. This position involves collaborating with clients to understand their strategic priorities and technical requirements, developing innovative technical solutions, and leading cross-functional teams to ensure successful project outcomes. The SME will leverage their extensive experience in cybersecurity to address complex security incidents and contribute to the overall success of the organization.

Responsibilities

• Interact with internal and external clients to understand strategic priorities and technical requirements.
• Develop and articulate innovative technical solutions to meet client needs.
• Review and modify solutions in collaboration with clients and stakeholders to ensure compliance with agreements.
• Participate in sales efforts to develop and build solutions for clients.
• Lead cross-functional teams of subject matter experts to deliver complex solutions.
• Utilize all available services, labor, assets, and software products to create optimized solutions for clients.
• Act as the primary source for design and development of service solutions globally.
• Collaborate with various teams (Sales, TSM, HR, etc.) to deliver winning solutions.

Requirements

• At least 10 years of progressive experience in the cybersecurity field.
• Strong understanding of networking protocols, operating systems, and common security vulnerabilities.
• Previous experience in handling security incidents, including identification, analysis, containment, and mitigation.
• Familiarity with digital forensics techniques for evidence gathering and incident reconstruction.
• Experience using fly away kits for incident response efforts.
• Ability to support incident response and recovery remotely or in person.
• Proficiency in creating reports and analyses of incident response efforts for senior leadership.
• CISSP certification required.

Nice-to-haves

• Experience with incident response in various contexts.
• Experience with USAID or in the Eastern European region.
• Familiarity with forensic tools such as X-Ways and FTK.
• Ability to obtain a Top Secret clearance (not required to start).

Benefits

• Comprehensive health insurance coverage.
• 401(k) retirement savings plan with company matching.
• Flexible work hours and remote work options.
• Professional development opportunities and training programs.