Technical Consultant-Threat Detection Content & Administration

Job Description

Introduction A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe. Youll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio Your role and responsibilities Continuously monitor security systems, logs, and network traffic for suspicious activity. Identify and triage security alerts, distinguishing between false positives and genuine threats. Investigate security incidents, determine root causes, and contain threats. Conduct regular vulnerability assessments and penetration testing. Identify and document vulnerabilities in systems and networks for patching and fixes. Contribute to the development and maintenance of security policies and procedures. Prepare and deliver regular security reports to management. Work with other security team members and IT staff to address security issues Required education Bachelors Degree Preferred education Masters Degree Required technical and professional expertise Proficiency in using SIEM tools like QRadar to collect, analyze, and correlate security events. Experience with EDR tools to detect and respond to threats on endpoints. Solid understanding of operating systems, network protocols, and general IT infrastructure is crucial. Understanding how to identify and assess vulnerabilities in systems and networks is important. Ability to analyze large amounts of data, identify patterns, and draw conclusions Preferred technical and professional experience Knowledge and understanding of WSUS and Ansible Knowledge and understanding of AWS, Azure or IBM Cloud Ability to follow established incident response procedures to contain and remediate security incidents