Find your next role

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

· Good Communication Skills

· Lead Security platform capacity planning and lifecycle management.

· Security platform integration and engineering

· Security platform configuration and policy management

· Validating the ingest of log sources and maintaining the flow of required logs to the SIEM.

· Contributing to the configuration and maintenance of security operations controls such as antivirus, application whitelisting, Host Intrusion Detection Systems (HIDS), Network Intrusion Detection Systems (NIDS), and Security Information and Event Management (SIEM) and Security Orchestration and Automation Platforms

· Design security architecture elements to mitigate threats as they emerge.

· Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.

· Monitor the external threat environment for emerging threats and advise relevant stakeholders on the appropriate courses of action.

· Work with Computer Security Incident Response Team (CSIRT) to manage & contain information security incidents and events to protect company IT assets, Intellectual Property, and company's reputation.

· Promptly responding to all security incidents and providing thorough post-event analyses

· Respond to advisory service requests to address and drive thru for closure as needed.

· Conduct security assessment on internal applications/infrastructure and deliver reports detailing assessment observations and associated recommendations for information security program development to help the client meet security and compliance standards.

· Perform technical research into advanced, targeted attacks, crimeware campaigns, malware and other emerging technologies and techniques to identify and report on cyber-attacks and attackers.

· Perform proactive research to identify, categorize and produce reports on new and existing threats.

· Supply actionable recommendations to other teams within Applied Materials, to bolster cyber security efforts.

· Display strong technical aptitude with: IT Security, Enterprise Firewalls, Intrusion Detection and Prevention, Antivirus, Web and Email Security, Server and application monitoring, Windows, and Linux based Web Services.

· Contributing to the configuration and maintenance of security operations controls such as Security Information and Event Management (SIEM), Security Orchestration and Automation Platforms (SOAR) and Smokescreen

Required education

Bachelor's Degree

Preferred education

Master's Degree

Required technical and professional expertise

· SIEM Tools: Qradar, Securonix, ArcSight, Splunk, Sentinel One (any of one).

· Security Tools: SmokeScreen, TIP, Wireshark, EDR, XDR

· Language (Optional): Python, PowerShell, Shell Scripting, JS, VB

Preferred technical and professional experience

· Bachelor’s degree relevant to Information Technology, Computer Science/Engineering (or equivalent).

· Certification: CEH, CompTIA Security+, AZ-200, AZ-900, SIEM Fundamentals.

Years of Experience:
4 - 10