Cybersecurity Vulnerability Management Analyst

Introduction
In this role you’ll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers) where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world.​ Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.

You’ll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat.

Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role you’ll be encouraged to challenge the norm investigate ideas outside of your role and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

Your Role and Responsibilities
As a Cybersecurity Analyst you’ll provide consulting services to analyze and resolve security incidents and to work with the client to achieve an overall superior security posture. Your responsibilities may encompass:

• Responsible for conducting Vulnerability Assessment and Penetration Testing (VAPT)
• Implementation of P.I.C.E.R.L (e.g. Preparation Identification Containment Eradication Recovery and Lessons learned) framework in managing an incident.
• Perform Security requirements analysis for application & implementation of recommendations & guidance
• Application of risk mitigation planning Vulnerabilities remediation recommendation & guidance Compliance & Metrics reporting
• Perform adversary attack simulation and analysis Threat Hunting Threat Intelligence.
• Will participate in Threat Risk Assessment Application Risk classification Security Architecture gap assessment and secure SDLC process definition and tooling
• Responsible in Network & Application Security Test planning & coordination SAST DAST Testing.

Required Technical and Professional Expertise

• Hands-on experience on Qualys tool
• Experience on Vulnerability Lifecycle Management
• Experience with Vulnerability Assessment and Penetration Testing (VAPT)
• Knowledge on Windows Security and Network Security concepts
• Experience in implementing P.I.C.E.R.L (e.g. Preparation Identification Containment Eradication Recovery and Lessons learned) framework
• Knowledge on technical briefs and incident report
• Experience in Threat Hunting & Threat Intelligence.

Preferred Technical and Professional Expertise

• Experience or exposure on the following Security tools: QRadar Trellix TrendMicro ESET
• Experience on SIEM system architecture design implementation system integration and troubleshooting​