［Japan IBM Consulting］IBM X-Force Incident Response Consultant

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
◆◆◆◆ Position Summary Mission ◆◆◆
We are looking for an Incident Response Consultant to join the Japan team of IBM X-Force Incident Response a provider of incident response support services to assist our clients in responding to security incidents.

In addition to technical support after an incident has occurred this position will provide non-technical support such as advice on response prioritization and public announcements as well as proactive response training and regular information provision. As a member of the Global team you will also be able to collaborate with overseas members.

◆◆◆ Duties ◆◆◆
[Incident Response Support]
・ Support response to cyber security incidents that occur in the client’s environment.
・ On-site or online evidence collection support.
・ Technical investigations such as forensic investigation log analysis malware sample analysis etc.
・ Provide advice on response priorities external public statements and other information to facilitate incident response
・ Holding investigation progress meetings
・ Prepare a report summarizing investigation conclusions recommended countermeasures etc. and hold a final debriefing session.

These actions will be taken in cooperation and collaboration with Global members as necessary.

Pre-response support
・ Providing information and building relationships with customers through regular meetings
・ Provide education such as desk training and technical training.

[Support for proposal activities]
Support proposal activities by introducing services and case studies to customers.

◆◆◆◆ The appeal of this position ◆◆◆
IBM X-Force is a team with over 20 years of research and development and service delivery experience. This position will have the opportunity to collaborate and interact with X-Force Incident Response members as well as X-Force Red for penetration testing and X-Force Threat Intelligence team for threat intelligence.
・ We can support clients in a wide range of industries including manufacturing finance insurance public services education retail and telecommunications.
・ We can respond to incidents in Japan and overseas.
・ We actively support training certification and conference participation.
・ We are telecommuting based. We will come to the office or respond to customers onsite as needed.

JAPSAP23

Required Technical and Professional Expertise

• Minimum 2 years of experience in security incident response (triage evidence collection forensics log analysis malware analysis report writing etc.)
  Six or more years of IT and information security related experience including the above
  Communication and coordination skills with clients and related departments
  English writing and reading communication skills (email Slack) (reference level: TOEIC L&R 600+ CEFR B1+)

Preferred Technical and Professional Expertise
・ Experience in providing information security training (desk exercises hands-on exercises etc.)
Experience in cloud computing environment (AWS Azure GCP etc.) including installation operation and incident response
・ Experience in OT/ICS installation operation or incident response
・ Experience in CSIRT operations at a business company
・ T e chnical support experience
・ Experience in SOC (Security Operation Center) as an analyst
・ Threat Intelligence related experience
・ Experience in leading an incident response team
CISSP GCIH GCFA GCFE GREM OSCP etc. certifications
・ Basic communication skills in Japanese and languages other than English (Chinese Portuguese etc.)