Cybersecurity Incident Response (Austin, TX)

Introduction
IBM Infrastructure is a catalyst that makes the world work better because our clients demand it. Heterogeneous environments the explosion of data digital automation and cybersecurity threats require hybrid cloud infrastructure that only IBM can provide.

Your ability to be creative a forward-thinker and to focus on innovation that matters is all support by our growth minded culture as we continue to drive career development across our teams. Collaboration is key to IBM Infrastructure success as we bring together different business units and teams that balance their priorities in a way that best serves our client’s needs.

IBM’s product and technology landscape includes Research Software and Infrastructure. Entering this domain positions you at the heart of IBM where growth and innovation thrive.

Your Role and Responsibilities
Do you have a passion for the cybersecurity industry? Do you see yourself taking on the role of a critical member of a response team that will be charged with leading and managing investigations? Are you a critical thinker that loves applying a combination of technical knowledge along with incredible organization and communications skills to investigate cyber incidents? Can you work within an ever changing environment and landscape? If so please read on.

Incident response professionals undergo extensive training that equips them to respond to cybersecurity incidents. In case of a data breach or similar event an incident responder needs to engage the appropriate stakeholders perform triage work with an Incidence Response Analyst (as needed) to drive containment and remediation actions and document root cause analysis (RCA) findings. In this role you need extensive training and experience in engaging and communicating with all levels of stakeholders across the enterprise and managing cases from start to finish in an expeditious manner.

In this role you will initiate and lead the case investigation engaging the reporter and appropriate stakeholders to determine the scope timeline and potential impact or risk to IBM and/or IBM clients.

You will work with an Analyst as needed to ensure the issue is contained short or long-term remediations actions are defined and assigned ownership and the root cause of the issue/event is documented.

This role has high visibility and requires regular interactions with business executives business unit security focals Cybersecurity Legal Corporate Security Data Privacy Leaders Corporate Communications and Human Resources etc. Therefore you will need to have excellent communication skills.

In addition since the case records may be used for audits Executive reporting and potentially for litigation you will need to document the case status and evidence thoroughly accurately and consistently throughout the case lifecycle.

Please be advised that this role once onboarded and trained will require off shift work and weekend rotation. In cybersecurity there is no off time!

Required Technical and Professional Expertise

• At least 2-3 years experience managing large scale cybersecurity investigations/case management
• Experience dealing with Federal case work
• Proven ability to recognize and categorize types of vulnerabilities and associated attacks
• Experience leading investigations with large numbers of stakeholders
• The ability to present highly technical information to non-technical audiences
• Experience documenting root cause analysis

Preferred Technical and Professional Expertise

• Certification(s) in Incident Response s
• Strong understanding of Windows Mac and Linux operating systems
• Familiarity with tools used in forensic investigations
• Ability to successfully lead and facilitate information gathering meetings
• Experience managing small and larger scale cyber security incident