Technical Consultant-Security Intel & Operations Consulting Svcs

Hybrid - Bangalore, IN

Professional, Scientific, and Technical Services

About the position

In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Responsibilities

• Analyze and triage security incidents to determine their severity and impact on Infrastructure systems.
• Primary point of contact for Cyber Security Incident response in the Cyber Security Escalations team.
• Provide a first point of contact for L3 security escalations from the SOC team, ensuring a thorough review, escalation.
• Conduct in-depth analysis of security events, collaborating directly with different stakeholders to escalate and thoroughly investigate incidents.
• Participate in Security Incident Response Team in the identification, containment, eradication, and resolution of security issues.
• Assist in the development and refinement of SOC processes, procedures, and playbooks.
• Create and maintain incident reports, documenting findings, actions taken, and lessons learned.

Requirements

• Bachelor's Degree
• Conduct in-depth analysis of security events, collaborating directly with different stakeholders to escalate and thoroughly investigate incidents.
• Participate in Security Incident Response Team in the identification, containment, eradication, and resolution of security issues.
• Assist in the development and refinement of SOC processes, procedures, and playbooks.

Nice-to-haves

• Master's Degree
• Stay current with emerging threats, vulnerabilities, and security technologies to proactively protect the organization.
• Good understanding on Phishing email analysis and their terminologies.
• Having knowledge on EDR solutions (Preferred CrowdStrike).
• Participate in regular SOC team meetings and provide input on improving security posture.