Technical Consultant-Security Intel & Operations Consulting Svcs

Hybrid - Bangalore, IN

Professional, Scientific, and Technical Services

About the position

In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Responsibilities

• Administer the deployed SIEM service.
• Deploy a SIEM solution from scratch, gathering all required information to build the SIEM solution.
• Maintain technical knowledge within areas of expertise.
• Identify, analyze, develop new or tune & refine content or use cases.
• Perform root cause analysis for preventative investigation.

Requirements

• Bachelor's Degree.
• Experience in any of the query languages (AQL, KQL, SPL, LEQL) for writing complex queries and saved search creation.
• Strong knowledge of different cybersecurity frameworks (MITRE, NIST, Cyber kill chain model).
• Understanding of regular expression writing and custom parsing.

Nice-to-haves

• Master's Degree.
• Collaborate with key stakeholders within technology, application, and cyber security to develop use cases to address specific business needs.
• Create technical documentation around the content deployed to the SIEM.
• Create and develop correlation and detection rules with SIEM solution, reports & dashboards to detect emerging threats.