Technical Consultant-security Intel & Operations Consulting Svcs Job in International Business Machines

Technical Consultant - Security Intel & Operations Consulting Services

Location: Bangalore, Karnataka, India

Job Type: Full-Time

Experience Level: Senior

Introduction:

At IBM Consulting, we believe that work is more than just a job it's a calling. In the role of Technical Consultant - Security Intel & Operations, you will be part of our Client Innovation Centers (Delivery Centers), where we deliver deep technical and industry expertise to both public and private sector clients across the globe. Our team helps clients to innovate, adopt new technologies, and improve their security posture.

Are you ready to lead in this new era of technology and solve some of the world s most challenging security problems? If so, let s talk.

Your Role and Responsibilities:

As a Senior SOC Analyst working within the 24/7 Cyber Fusion Center (CFC), your role will involve the proactive monitoring, triaging, analyzing, and escalating incidents in client environments. You will be tasked with utilizing various cyber operations tools and technologies to analyze data, detect security threats, and mitigate risks. Your expertise will contribute to maintaining the security integrity of client systems and ensuring efficient incident response.

Key Responsibilities:

Incident Monitoring & Analysis:

• Monitor and analyze security events using various cybersecurity tools like SIEM, IDS/IPS, Firewalls, network traffic logs, cloud platforms, and SOAR solutions to detect potential threats and mitigate risks.
• Perform event correlation using multiple data sources to understand the nature of security incidents and determine their impact on client environments.

Threat Detection & Mitigation:

• Analyze alerts to identify active threats, perform root cause analysis, and apply appropriate mitigation techniques for both structured and unstructured environments.
• Evaluate security incidents across AWS and Azure environments, analyzing system, network, and email security events.

Proactive Cybersecurity Measures:

• Conduct root cause analysis of security events and recommend actions to address vulnerabilities.
• Contribute to the development and constant improvement of SOC runbooks and playbooks to optimize security operations.

Collaboration & Reporting:

• Work closely with cross-functional teams to escalate critical incidents and provide daily summary reports on activities relevant to cyber operations.
• Lead discussions on incident trends, perform cyber operations trend analysis, and report on findings to ensure continuous security enhancement.

Continuous Improvement:

• Recommend improvements to automations, alert fidelity, and security controls to improve security efficacy and response time.
• Engage in team meetings, calls, and chats, contributing technical insights to enhance security strategies and tactics.

Required Education and Experience:

Education:

• Bachelor s Degree in Computer Science, Information Technology, Cybersecurity, or related fields.
• A Master s Degree is preferred but not required.

Experience:

• Extensive experience working as a SOC Analyst or similar cybersecurity roles, especially in a 24/7 security operations center environment.
• Proficient in event analysis, log analysis, and network event management.
• Hands-on experience with cloud environments such as AWS and Azure, with a focus on cybersecurity threats and mitigations.
• Solid understanding of TCP/IP network security, modern attack techniques, exploitation methods, and operating system security.

Preferred Technical and Professional Experience:

Security Tools & Platforms:

• Experience with CyberArk, Azure SSO, and other enterprise security technologies.
• Knowledge of enterprise web technologies and cutting-edge security infrastructures.
• Familiarity with security automation tools and best practices for improving alert fidelity and security controls.

Advanced Event & Threat Analysis:

• Proven ability to perform high-quality triage and in-depth analysis of security alerts.
• Experience in documenting incidents and escalating critical issues with appropriate cyber operations reports.

Communication & Collaboration:

• Strong verbal and written communication skills, with the ability to convey complex security concepts to both technical and non-technical stakeholders.
• Ability to actively contribute to team discussions, runbook creation, and security playbook updates.

Why IBM?

• Global Impact: Join a globally recognized team working at the forefront of cybersecurity, helping to shape the future of digital security.
• Career Development: IBM offers a strong focus on professional growth, offering learning opportunities, certifications, and exposure to the latest security technologies.
• Collaborative Culture: Be part of a collaborative and dynamic team, working together to tackle the most pressing security challenges faced by businesses around the world.

If you are ready to contribute to the security and resilience of leading global organizations, we invite you to apply and be a part of our forward-thinking security team at IBM Consulting.