Security Intel & Operations Consultant

Introduction
At IBM work is more than a job – it’s a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better but to attempt things you’ve never thought possible. Are you ready to lead in this new era of technology and solve some of the world’s most challenging problems? If so lets talk.

Your Role and Responsibilities
Individuals with this Role/Specialty primarily apply their technical skills in client billable services supporting Security Intelligence and Operations Consulting Services by using assets and reference architectures and will have expertise in one or more Security Intelligence Operation Center (SIOC) platforms and technologies and are able to articulate IBM’s SIOC and SIEM points of view. These include SIEM (Security Incident and Event Management) technology ticketing systems log sourcing contextual data data source integration techniques log and test environment management configuration of production environments business intelligence and web portals.

Required Technical and Professional Expertise
Understanding of network host cloud and email based Cybersecurity events
Ability to work in a team to troubleshoot and solve complex problems
Tier 1 analyst support eyes on glass on Splunk which is now their SIEM. Also other tool feeds and alerts. Responding to alerts initial triage and escalation. Support on shift 2 and 3 evening/night
Has a SOC with Splunk SIEM requires second and third shift coverage triage of alerts. Sources: Endpoints WAF phishing e-mails Palo Alto.
Initiate triage on notable (network detection / intrusion) events in order to determine if malicious activity is occurring or has occurred within the NextEra enviroment
Analyze e-mails submitted by users for malicious content
Escalate potential Cybersecurity issues and participate in investigation triage calls
Accuratly document findings in the appropriate system an close out investigations
3rd shift potential

Preferred Technical and Professional Expertise
NA