SOC Lead

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.
You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat.
Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

About the Job:
As Security Consultant, you are responsible for managing day to day operations of Security Device Management SIEM, ArcSight, Qadar, incident response, threat hunting, Use case engineering, SOC analyst, device integration with SIEM.

If you thrive in a dynamic, reciprocal workplace, IBM provides an environment to explore new opportunities every single day. And if you relish the freedom to bring creative, thoughtful solutions to the table, there's no limit to what you can accomplish here.

Your Role and Responsibilities

• What you'll do:
• Responsible for implementation partner to see project on track along with providing required reports to management and client
• Handle the project as well as BAU operations while ensuring high level of systems security compliance
• Coordinate with and act as an authority to resolve incidents by working with other information security specialists to correlate threat assessment data.
• Analyse data, such as logs or packets captures, from various sources within the enterprise and draw conclusions regarding past and future security incidents.
• Ready to support for 24/7 environment

Required Technical and Professional Expertise

• 8+ years of IT experience in security with at least 4+ Years in Security Operation center with SIEMs.
• B.E./ B. Tech/ MCA/ M.Sc.
• Maintaining SIEM/UEBA platform hygiene, Scripting, Automation
• SOAR Playbook Creation with Testing, with Change/Problem/Incident Management, with CP4S platform integration & dashboarding, Recovery Support.
• Expertise in Security Device Management SIEM, ArcSight, Qadar, incident response, threat hunting, Use case engineering, SOC analyst, device integration with SIEM
• Working knowledge of industry standard risk, governance and security standard methodologies
• Proficient in incident response processes - detection, triage, incident analysis, remediation and reporting
• Ability to multitask and work independently with minimal direction and maximum accountability.

Preferred Technical and Professional Expertise

• Preferred OEM Certified SOAR specialist + CEH
• Ambitious individual who can work under their own direction towards agreed targets/goals and with creative approach to work
• Intuitive individual with an ability to manage change and proven time management
• Proven interpersonal skills while contributing to team effort by accomplishing related results as needed
• Up-to-date technical knowledge by attending educational workshops, reviewing publications