Find your next role

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

In this role, you'll work in one of our IBM Consulting Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to a wide range of public and private sector clients around the world. Our delivery centers offer our clients locally based skills and technical expertise to drive innovation and adoption of new technology.

Your role and responsibilities

As a Security Consultant specializing in Intelligence & Operations, you play a crucial role in helping Client IT understand and address key security issues, exposures, and vulnerabilities. Your expertise in security intelligence and operations enables you to articulate effective security strategies and mitigation measures. Your primary responsibilities will include:

• Analyze threat campaigns, threat actors, malware, and TTPs, translating technical findings into business risk and impact.

• Collect, validate, enrich, and prioritize Indicators of Compromise (IOCs) from multiple sources.

• Consume and operationalize threat intelligence feeds (internal and external).

• Map threats and adversary behaviors to MITRE ATT&CK, aligning findings with existing security controls.

• Produce threat intelligence reports tailored to technical and non-technical audiences.

• Collaborate closely with the SOC team to provide threat context, historical insights, and potential attack scenarios during incident investigations.

• Support investigations by adding threat context, attribution insights, and likely attacker behavior.

• Communicate threat intelligence findings clearly and effectively to clients and stakeholders, both verbally and in writing.

Required education

Bachelor's Degree

Required technical and professional expertise

• Strong experience analyzing threat actors, campaigns, malware, and adversary TTPs.

• Ability to translate technical threat intelligence into actionable business risk insights.

• Knowledge of the financial services industry, including fraud-related threats and campaigns.

• Hands-on experience with IOC lifecycle management (collection, enrichment, validation, prioritization).

• Experience consuming and operationalizing threat intelligence sources and feeds.

• Solid understanding of MITRE ATT&CK framework and its application to detection and defense.

• Experience producing clear, structured threat intelligence reports.

• Strong verbal and written communication skills, with experience interacting directly with clients.

• Intermediate English level (technical communication).

Preferred technical and professional experience

• Knowledge of threat hunting methodologies and practices.

• Experience using scripts, APIs, or integrations with TIP, SIEM, and/or SOAR platforms for IOC ingestion and enrichment.