Technical Support Representative-Security Analyst

About the Role

As a Technical Support Representative: Security Analyst at IBM Consulting, you will play a critical role in safeguarding client systems and ensuring the security posture of client environments. Your primary responsibility is to provide Threat Management L1 monitoring services, receiving, documenting, and reviewing incident-related information.

Key Responsibilities

• Analyze Security Alerts: Swiftly analyze and escalate client risk and operational disruptions to respective stakeholders in a timely manner, utilizing an array of tools and established procedures to take appropriate actions for escalating security threats, anomalies, and breaches.
• Provide Incident Response: Perform initial analysis and troubleshooting of security alerts, anomalies, and technical issues, prioritizing incidents based on varying levels of complexity, and effectively communicate and collaborate with clients and internal stakeholders.
• Enhance Knowledge-Based Systems: Contribute to the enhancement of knowledge-based systems to bolster the efficacy of security operations, providing technical guidance and assistance to clients and personnel within multi-vendor, multi-protocol environments.
• Foster Client Self-Sufficiency: Create and disseminate knowledge assets and digital resources to cultivate client self-sufficiency, working closely with development, services, and field teams to ensure the relevance and effectiveness of technical solutions provided for incident resolution.
• Elevate Operational Efficiency: Contribute to initiatives to elevate operational efficiency and client satisfaction within the SOC monitoring team.

Requirements & Tech Stack

• Threat Management L1 Monitoring: Familiarity with L1 monitoring services via SIEM, EDR, MDR, or SOC mailbox, including receiving, documenting, and reviewing incident-related information.
• Security Tools: Hands-on experience with an array of tools and established procedures to take appropriate actions for escalating security threats, anomalies, and breaches.
• Core Operational Processes: Demonstrated experience and proficiency in core operational processes related to security operations.
• Technical Troubleshooting: Experience with initial analysis and troubleshooting of security alerts, anomalies, and technical issues, prioritizing incidents based on varying levels of complexity.
• Multi-Vendor Environment: Exposure to providing technical guidance and assistance within multi-vendor, multi-protocol environments.

Qualifications

• Education: Master's Degree (Preferred)
• Cybersecurity Awareness: Awareness of evolving cybersecurity threats and industry trends.
• Emerging Threats: Experience working with emerging threats and technologies.
• Negotiation Techniques: Exposure to negotiation techniques.