Introduction
At IBM, work is more than a job - it's a calling: To build. To design. To code. To consult. To think along with clients and sell. To make markets. To invent. To collaborate. Not just to do something better, but to attempt things you've never thought possible. Are you ready to lead in this new era of technology and solve some of the world's most challenging problems? If so, lets talk.
Your role and responsibilities
- Expertise on Endpoint Security as in DLP, AV, EDR/EPP solutions
- Experience with EDR tools (e.g., SentinelOne, CrowdStrike) and anti-virus/anti-malware solutions.
- Proficiency in analyzing and mitigating endpoint security threats and managing endpoint protection policies.
- SIEM and Incident Response: Hands-on experience with SIEM platforms (e.g., Splunk, QRadar, Microsoft Sentinel).
- Strong skills in incident response, threat hunting, and forensic investigation.
- Access and Identity Management: Familiarity with IAM concepts and tools, including MFA and SSO solutions.
- Experience with configuring and troubleshooting access control for network and endpoint systems.
- Automation and Scripting: Basic scripting abilities (e.g., Python, PowerShell) for automating security processes.
- Excellent analytical and problem-solving skills.
- Effective communication skills for interacting with team members and stakeholders.
- Ability to work in a fast-paced environment and handle high-stakes incidents.
- Certifications (Preferred)
- CompTIA Security+, Cisco CCNA Security, Certified Ethical Hacker (CEH), or other relevant security certifications.
Required education
Bachelor's Degree
Preferred education
Bachelor's Degree
Required technical and professional expertise
- 10 years of experience in security & infrastructure administration
- Experience on any Products for Implementation & Operations in
- SIEM, Nessus, CEH, Qualys guard, Vulnerability Assessment and Penetration Testing, Network Security, Web Application
- Expertise of handling industry standard risk, governance and security standard methodologies and incident response processes (detection, triage, incident analysis, remediation and reporting).
- have shown attention to detail and interpersonal skills and expertise to oversee input and develop relevant metrics and Competence with Microsoft Office, e.g. Word, Presentation, Excel, Visio, etc
Preferred technical and professional experience
- Ability to multitask and work independently with minimal direction and maximum accountability.
- One or more security certifications. (CEH, Security+, GSEC, GCIH, etc).