Technical Consultant - Threat Detection Response & Intelligence

About the role

IBM Consulting is hiring a Technical Consultant focused on Threat Detection, Response and Intelligence. The role safeguards an organization's digital infrastructure by identifying, analyzing and mitigating cyber threats, using cybersecurity tools to monitor, prioritize, investigate and respond to security incidents.

Key responsibilities

• Analyze security events and logs across multiple data sources, correlate events, review logs deeply and validate true positives against false positives
• Triage, classify and prioritize incidents based on risk and impact
• Perform root cause analysis to understand how incidents originated and evolved
• Analyze IOCs and threat vectors, and apply threat intelligence feeds to support detection and investigation
• Identify signs of exploitation, vulnerabilities and security gaps
• Work with team members to tune and optimize SIEM/XDR platforms
• Manage technical communication and incident escalation according to defined procedures

Required profile

• Strong experience in advanced log and event analysis, alert correlation, deep investigation and incident validation
• Hands-on experience with incident triage, classification and prioritization
• Strong analytical skills for root cause analysis
• Ability to recognize exploitation techniques, vulnerabilities and security control gaps
• Intermediate English level (technical communication)

Required skills

• Practical knowledge of threat intelligence consumption and application to detection
• Solid understanding of the MITRE ATT&CK framework
• Experience analyzing malicious behavior, IOCs and attack vectors
• Teamwork on SIEM/XDR tuning and optimization
• Preferred: knowledge of Windows and Linux, threat hunting, and designing and improving security use cases and correlation logic