Your Role and Responsibilities:
As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves using a variety of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.
Your Primary Responsibilities Will Include:
- Conduct Event Investigations: Investigate security incidents using SIEM, SOAR, EDR, and XDR platforms, and apply industry frameworks like MITRE ATT&CK; and the Cyber Kill Chain to understand and counter adversary tactics effectively.
- Manage Incident Reports: Prioritize and manage incident reports, providing actionable recommendations and responses to strengthen the client's security posture.
- Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats.
- Engage in Vulnerability Management: Participate in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
- Provide Actionable Recommendations: Deliver recommendations and responses to clients to enhance their security posture.
Required Education:
Bachelor's Degree
Preferred Education:
Master's Degree
Required Technical and Skilled Expertise:
- Exposure to Cybersecurity Tools: Familiarity with a variety of cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms,
to monitor, prioritize, investigate, and respond to security incidents.
- Understanding of Industry Frameworks: Knowledge of industry frameworks like MITRE ATT&CK; and the Cyber Kill Chain to understand and counter adversary tactics effectively.
- Experience with Network and Endpoint Analysis: Ability to interpret security tools and logs from Windows, MAC, and Linux systems to identify potential threats.
- Exposure to Vulnerability Management: Participation in vulnerability management and cyber threat intelligence activities to identify and anticipate potential threats.
- Certification in Security Technologies: Familiarity with security technologies and certifications related to threat detection, response, and intelligence.
Preferred Technical and Professional Experience:
- Familiarity with Scripting Languages: Exposure to scripting languages such as Python, PowerShell, or Bash is beneficial for automating tasks and interacting with various cybersecurity tools.
- Knowledge of Cloud Security: Understanding cloud security principles and experience working with cloud-based security solutions can be advantageous in identifying and mitigating cyber threats.
- Exposure to Threat Intelligence Platforms: Familiarity with threat intelligence platforms and feeds can aid in staying up-to-date with emerging threats and improving incident response capabilities.
Years of Experience:6 - 8
📌 Technical Consultant-Threat Detection Response & Intelligence (Noida)
🏢 IBM
📍 Noida