Introduction
Information and Data are some of the most important organizational assets in today's businesses. As a Security Consultant, you will be a key advisor for IBM's clients, analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.
Your Role and Responsibilities
In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology. A career in IBM Consulting embraces long-term relationships and close collaboration with clients across the globe. You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including IBM Software and Red Hat. Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.
Required Technical and Professional Expertise
The Intelligence & Operations Cybersecurity Consultant will provide delivery leadership and client satisfaction in Security Intelligence and Operations. They will serve as a Trusted Advisor to IBM Clients for their core security domain. They will strive to deliver services to IBM clients with the highest quality and customer satisfaction possible.
Responsibilities: Design, implement and transform the clients SOC in line with a developed maturity roadmap focused on reducing enterprise risk through improved detection and response and use of AI components.Educate the client team on Threat Use Case methodology and conduct comparative analysis of current Security Use Cases aligned to industry frameworks.Assist a client in procuring, deployment, assessments, migrations and/or upgrading its SIEM technology, with a base set of: use cases, correlation rules, data source integrations and dashboard/reports.Support client's in custom developments around SIEM solutions (like: Data Source customizations, Complex rules development, among others).Improve client's detection capabilities through MITRE ATT&CK framework, assessing data sources/controls (e.g. XDR/SIEM/EDR/SOAR) and provide recommendations to remediate gaps in coverage.Assess the client's SOAR platform architecture, transformation requirements, security tool suite, processes, playbooks, and case management.Create and configure playbooks and integrations that align with the client's runbooks, orchestration and automation use cases.Lead and develop an end-point detection and response (EDR) strategy and roadmap to threat detection and response that provides holistic protection against cyberattacks.Be a trusted advisor to IBM Clients for their core security domain and participate in client governance program where appropriate.Help organize project approaches and teams for client delivery and lead project delivery.Work closely with the solution design teams in developing client presentations and Statement of Works (SOWs).Use your expertise in the security industry to contribute content and advice to the offering development process. Preferred Technical and Professional Expertise
Experience & Skills:
Microsoft Sentinel, Palo Alto XSIAM, QRadar SIEM.Cyber Threat Intelligence.SIEM, SOAR or EDR administration and configuration.Client facing consultant with 5+ years.Previous SOC experience on any position, preferably SIEM and SOAR administration.Intermediate English level.
#J-18808-Ljbffr