Find your next role

Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide. You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success. You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results. Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

Key Responsibilities
Platform Strategy & Engineering:

• Act as the experienced and technical owner for the Cortex XSIAM, XDR, DLP, Decoy platforms.

Implement and manage the integration and data flow between XDR, DLP, Decoy and XSIAM.

• Lead platform upgrades, performance tuning, and capacity planning to maintain a highly available and scalable security infrastructure.
• Develop and enforce governance models, including user roles, access controls, and operational procedures.
• Deploy, configure, and maintain Zscaler Smokescreen/Decoy, Trellix DLP and Cortex XDR solutions across on-premises, cloud, and hybrid environments.
• Manage decoy assets, including breadcrumbs, lures, and deception networks, to mimic real IT assets.
• Ensure high availability, scalability, and performance of the deception infrastructure.

Collaboration & Leadership:

• Mentor SOC analysts on effective use of the Cortex platform for investigation and response.
• Translate threat intelligence and analyst workflows into technical requirements and platform enhancements.
• Lead projects to enhance our security posture through the adoption of new Cortex features and capabilities.

Required education

Bachelor's Degree

Preferred education

Master's Degree

Required technical and professional expertise

• Required: 5+ years of hands-on experience in cybersecurity, with a focus on security engineering, incident response, and tool management.
• 3+ years of proven, deep technical experience with the Decoy , DLP, XDR & SIEM specifically:
• Decoy: Demonstrable experience in managing the Smokescreen Decoy.
• XDR: Strong hands-on experience in managing the endpoint security platform, including policy configuration, agent troubleshooting, and incident analysis.
• XSIAM: Practical experience with data ingestion, writing XQL queries, and building custom detection rules in SIEM
• DLP: Demonstrable experience in deploying, configuring, and using a Trellix DLP.

Preferred technical and professional experience

One or more certifications :

PCXSI (Cortex XSIAM Certified Administrator)

PCDRA (Cortex XDR Certified Administrator)

DLP and Decoy

Years of Experience:
5 - 7