SIEM_SOAR_MDR Engineering Lead

Who We Are

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward – always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

The Role

As a Cybersecurity Defense professional at Kyndryl, you will encompass cybersecurity, incident response, security operations, vulnerability management, and the world of cyber threat hunting and security intelligence analysis all to protect the very heartbeat of organizations – their infrastructure.

At Kyndryl, we design, run, and manage the most modern and reliable technology infrastructure that the world depends on every day.  Kyndryl Consult provides advice, move, build, and implementation services by working in partnership with customers and are dedicated to ensuring that each achieves their peak digital performance.

Kyndryl’s Security & Resiliency is one of our most critical practices, ensuring enterprises, regardless of their size and complexity, remain secure, available, reliable, and resilient. We take Cybersecurity seriously. We're not just invested; we're committed. We're not just protecting data; we're empowering. Kyndryl is committed to making the world safer, not only by investing in state-of-the-art services and technologies but also by empowering underserved communities with essential cyber skills.  

Security Operations and Incident Response is a critical service within Kyndryl, and this Security Consultant role will be reporting to the Global lead for Security Operations Advisory service within the Kyndryl Consult Security & Resiliency Business in a hands-on and customer facing role focused on assess, advise and implement Threat monitoring and detection solutions that will support clients’ SOC initiatives.

Your Future at Kyndryl When you join Kyndryl, you're not just joining a company – you're entering a space of opportunities. Our partnerships with industry alliances and vendors mean you'll have access to skilling and certification programs needed to excel in Security & Resiliency, while simultaneously supporting your personal growth. Whether you envision your career path as a technical leader within cybersecurity or transition into other technical, consulting, or go-to-market roles – we’re invested in your journey.

Who You Are

You’re good at what you do and possess the required experience to prove it. However, equally as important – you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused – someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Technical and Professional Expertise

• 9 years hands-on experience on SOC operations (Standard Operations Procedures, Runbook and Playbooks).
• Designing, maintaining and troubleshooting the SIEM/XSOAR environment
• Implement changes of SIEM/XSOR infrastructure
• Create, maintain and consult security monitoring measures
• Building SIEM infrastructure for new customers
• Building SIEM infrastructure for new customers during onboarding projects
• Candidates should possess proven record in advising on Security Operations & Response at the Chief Information Security Officer (CISO) and/or Senior Security Manager levels and be recognized for business as well as technical acumen.
• Experience on programming languages: Python and/or R. and/or Rust
• Experience with Data monitoring / Data Science 
• As a technical lead/architect, successfully transforming traditional SOC environment to a Modern SOC architecture including cloud integrations.
• Deep knowledge in the most common and used frameworks (E.g., NIST CSF, ISO2700x, CMM SOC, etc.)
• The candidate must have exceptional communication and presentation skills as well as must be a self-starter and always exhibit professional business conduct.
• Stakeholder management and interpersonal skills at both a technical and non-technical level.
• Must be willing to travel up to 50%, depending on client requirements.

Preferred Technical and Professional Experience

• QRadar or Splunk and Microsoft Sentinel.
• Thorough knowledge of SOAR (Security Orchestration Automation & Response) technologies.
• Thorough knowledge on defining data sources monitoring based on clients’ business  
• Thorough knowledge on MITRE Frameworks (ATT&CK, D3FEND)
• Familiar with Cyber Kill Chain
• Thorough knowledge on how to operationalize ongoing security configuration governance service using SOC standard methodologies, metrics, KPIs, KRIs, Operational Procedures.

Being You

Diversity is a whole lot more than what we look like or where we come from, it’s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we’re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you – and everyone next to you – the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That’s the Kyndryl Way.

What You Can Expect

With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Kyndryl cares about your well-being and prides itself on offering benefits that give you choice, reflect the diversity of our employees and support you and your family through the moments that matter – wherever you are in your life journey. Our employee learning programs give you access to the best learning in the industry to receive certifications, including Microsoft, Google, Amazon, Skillsoft, and many more. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations.  At Kyndryl, we invest heavily in you, we want you to succeed so that together, we will all succeed.

Get Referred!

If you know someone that works at Kyndryl, when asked ‘How Did You Hear About Us’ during the application process, select ‘Employee Referral’ and enter your contact's Kyndryl email address.