Threat Detection Response & Intelligence Consultant

About the role

IBM Consulting is hiring a Technical or Security Consultant focused on Threat Detection Response & Intelligence. The role safeguards an organization's digital infrastructure by identifying, analyzing and mitigating cyber threats, using cybersecurity tools to monitor, prioritize, investigate and respond to security incidents.

Key responsibilities

• Analyze security events and logs across multiple data sources, correlate events, review logs deeply and validate true positives against false positives
• Triage, classify and prioritize incidents based on risk and impact, and carry out root cause analysis
• Analyze IOCs and threat vectors, and apply threat intelligence feeds to support detection and investigation
• Identify signs of exploitation, vulnerabilities and security gaps
• Collaborate with team members to tune and optimize SIEM/XDR platforms
• Manage technical communication and incident escalation according to defined procedures

Required profile

• Bachelor's degree preferred
• Strong experience in advanced log and event analysis, alert correlation, deep investigation and incident validation
• Hands-on experience with incident triage, classification and prioritization
• Intermediate English level (technical communication)

Required skills

• Root cause analysis and analysis of malicious behavior, IOCs and attack vectors
• Practical knowledge of threat intelligence and the MITRE ATT&CK framework
• Ability to recognize exploitation techniques, vulnerabilities and control gaps
• Team experience tuning and optimizing SIEM/XDR platforms
• Preferred: knowledge of Windows, Linux and macOS; threat hunting; designing and improving security use cases and correlation logic