Security Consultant - SIEM L2

Introduction

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe. Youll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio, including Software and Red Hat. Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, youll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in groundbreaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience

Your Role And Responsibilities

As SIEM Analyst, you will be responsible for handling the daily monitoring of Information security events on the SIEM tools. Come join our team of IBM experts, who are leaders with vision, distinguished engineers and IT architects who have worked with thousands of clients to transform enterprise IT, migrate to cloud, apply automation and ensure business continuity. We help client run their IT better, accelerate innovation and deliver unmatched performance with the power automation. If you thrive in a dynamic, reciprocal workplace, IBM provides an environment to explore new opportunities every single day. And if you relish the freedom to bring creative, thoughtful solutions to the table, theres no limit to what you can accomplish here.Responsibilities * Responsible for security researcher to provide insight and understanding of new and existing information security threats

• Responsible to participate in recommending improvements to SOC security process, procedures, policies, security incident management and vulnerability management processes
• You will be involved in evaluating, recommending, implementing, and solving problems related to security solutions and evaluating IT security of the new IT Infrastructure systems
• Keep yourself up-to-date with emerging security threats including applicable regulatory security requirements
• Work in a 24x7 Security Operation Centre (SOC) environment
  
  

• Minimum 3+ years’ experience in SIEM.
• Proven expertise in handling the daily monitoring of Information Security events on the QRadar / ArcSight / Splunk console platform
• Proficient in monitoring security events from various SOC channels (SIEM, Tickets, Email and Phone), based on the security event severity to handle the service support teams, tier2 information security specialists
• Expertise in threat modelling and Use case development and ability to review policies of security monitoring tools based on security concepts and logical approach
  
  

• Preferred OEM Certified SOAR specialist + CEH
• Ambitious individual who can work under their own direction towards agreed targets/goals and with creative approach to work
• Intuitive individual with an ability to manage change and proven time management
• Proven interpersonal skills while contributing to team effort by accomplishing related results as needed
• Up-to-date technical knowledge by attending educational workshops, reviewing publications