Vacancy expired!
IntroductionAt IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.Your Role and ResponsibilitiesWe are looking for a driven individual to join the IBM MSS Security Operations Center (SOC) as a Cyber Threat Responder. The Cyber Threat Responder will be part of a 24x7 global team that monitors threats in client environments worldwide. In this role you will be working to detect and respond to advanced threats and communicate your findings directly with clients. You will work to provide actionable analysis of malicious code and processes and identify vulnerabilities based on high-confidence Endpoint Detection and Response (EDR) detections. Pivoting directly in EDR platforms you will gain a deep understanding of how industry tools function and be able to apply your love incident response by actively mitigating or containing threats and provide actionable recommendations to clients. The Cyber Threat Responder will be able to work independently and as part of a large security operations team. This candidate should have a strong understanding of adversary TTPs, malware, and exceptional technical writing skills. If you are a problem solver, like to build tools to automate repetitive tasks, and have a passion for cybersecurity, let's talk.IntroductionCybersecurity isn't just about hackers and defenses. It's about people and the way security impacts their daily lives. Protecting the world is an ambitious goal, but an important one that unites us. Our mission drives the way we design security solutions. It guides the way we serve customers and help organizations and communities reach their potential. Threat prevention with advanced threat intelligence is key to helping organizations proactively identify and investigate threats around the clock, which is what makes MDR an incredibly intelligent service.Your Role and ResponsibilitiesIBM Security is hiring a MDR Cyber Threat Responder. You will work to detect and respond to advanced threats alongside a global SOC team. You will be responsible for monitoring, triaging, and communicating security incidents to clients. You will work on automation and enhancement projects to further the development of the MDR business.Analyzing alerts in EDR platforms and provide recommendations to clients on mitigating and remediating threats
Ability to communicate with clients concerning true positives and provide feedback for tuning efforts and improved detection capabilities
Owning and documenting processes and leading projects to completion
Passion for cybersecurity and a strong curiosity to explore new areas of the field like XDR, automation, and Artificial Intelligence/Machine Learning
Working with internal IBM security teams to provide contextual visibility to ongoing investigations and may serve as an escalation point from network security analysts
Required Technical and Professional Expertise5+ years of experience or ability to demonstrate advanced knowledge, analyzing cyber threat intelligence and the ability to analyze and correlate data across varying log sources, such as EDR alerts, network logs, and endpoint event logs
Strong analytical and problem-solving skills
Understanding of incident response with a deep knowledge of Windows, MacOS, and Linux operating systems
Ability to quickly identify suspicious events through pattern and behavioral analysis, intelligence correlation and anomaly detection
Strong understanding of adversary TTPs, can speak to the lifecycle of an incident and communicate this through exceptional technical writing skills
Knowledge of current malware trends and malware analysis experience
Experience investigating and remediating threats on endpoints
Preferred Technical and Professional ExpertiseDeep knowledge of Windows internals, how processes interact with the operating system, and knowledge of malware persistence, etc.
Understanding of the MITRE ATT&CK framework
Experience with Splunk's SPL or MS Defender's KQL for advanced queries
Proficient with Windows and Linux command lines to query systems with Live Response
Malware reverse engineering skills with both static and dynamic analysis to identify detectible behavior
Scripting experience to automate tasks or create custom tooling
Participated in CTFs or pentesting competitions, knowledge of system exploitation
About Business UnitIBM's Cloud and Cognitive software business is committed to bringing the power of IBM's Cloud and Watson/AI technologies to life for our clients and ecosystem partners around the world. IBM provides you with the most comprehensive and consistent approach to development, security and operations across hybrid environments-with complete software solutions for business and IT operations, development, data science, security, and management. Our experts and software capabilities help organizations develop applications once and deploy them anywhere, integrate security across the breadth of their IT estate, and automate operations with management visibility. With IBM, you also have access to new skills and methods, governance and management approaches, and a deep ecosystem of industry experts and partners.This job requires you to be fully COVID-19 vaccinated prior to your start date, where legally permissible. Proof of vaccination status will be required. If you are unable to be vaccinated due to medical, pregnancy or religious reasons, we offer accommodations in accordance with applicable law.Your Life @ IBMAre you craving to learn more? Prepared to solve some of the world's most unique challenges? And ready to shape the future for millions of people? If so, then it's time to join us, express your individuality, unleash your curiosity and discover new possibilities.Every IBMer, and potential ones like yourself, has a voice, carves their own path, and uses their expertise to help co-create and add to our story. Together, we have the power to make meaningful change - to alter the fabric of our clients, of society and IBM itself, to create a truly positive impact and make the world work better for everyone.It's time to define your career.About IBMIBM's greatest invention is the IBMer. We believe that through the application of intelligence, reason and science, we can improve business, society and the human condition, bringing the power of an open hybrid cloud and AI strategy to life for our clients and partners around the world.Restlessly reinventing since 1911, we are not only one of the largest corporate organizations in the world, we're also one of the biggest technology and consulting employers, with many of the Fortune 50 companies relying on the IBM Cloud to run their business.At IBM, we pride ourselves on being an early adopter of artificial intelligence, quantum computing and blockchain. Now it's time for you to join us on our journey to being a responsible technology innovator and a force for good in the world.Location StatementIBM offers a wide range of resources for eligible IBMers to thrive both inside and outside of work. In addition to a competitive benefits program consisting of medical and life insurance, retirement plans, and time off, eligible employees may also have access to:12 weeks of paid parental bonding leave. Family care options are also available to support eligible employees during COVID-19.World-class training and educational resources on our personalized, AI-driven learning platform. IBM's learning culture supports your restless attitude to grow your skills and build the depth and scale of knowledge needed to achieve your career goals.Well-being programs to support mental and physical health.Financial programs that empower you to plan, save, and manage your money (including expert financial counseling, 401(k), IBM stock discount, etc.).Select educational reimbursement opportunities.Diverse and inclusive employee resource groups where you can network and connect with IBMers across the globe.Giving and volunteer programs to benefit charitable organizations and local communities.Discounts on retail products, services, and experiences.We consider qualified applicants with criminal histories, consistent with applicable law.IBM will not be providing visa sponsorship for this position now or in the future. Therefore, in order to be considered for this position, you must have the ability to work without a need for current or future visa sponsorship.Being You @ IBMIBM is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, pregnancy, disability, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
Vacancy expired!