Security Operations Perimeter Security DLP

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.
You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio, including Software and Red Hat.
Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in groundbreaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.
Information and Data are some of the most important organizational assets in today's businesses. As a Security Consultant, you will be a key advisor for IBM's clients, analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

As a perimeter security SME, you will be Act as the subject matter expert and System Lead for Perimeter security tools like WAF (Imperva Secure sphere, F5), DDOS (Arbor APS), NIPS(TippingPoint), Deception (Smokescreen), SSLO (F5). Your Role and Responsibilities

Work closely with the Security Managers, Leadership and other Enterprise IT teams and be the bridge between the various departments.

Strong Technical Knowledge and Experience in Perimeter Security management, audit and reporting.

Act as the subject matter expert and System Lead for Perimeter security tools like WAF (Imperva Secure sphere, F5), DDOS (Arbor APS), NIPS(TippingPoint), Deception (Smokescreen), SSLO (F5)

Good Experience in Administration of Technologies like Endpoint Security, Anti-APT Solutions Endpoint/EDR, Network, Email (FireEye HX, EX, NX, MVX), WAF (Imperva Secure sphere), Smokescreen, DDOS (Arbor APS), NIPS(TippingPoint) & F5 SSLO & WAF Solution and should be Certified in at least 3 Products

SIEM Event Analysis and manual Co-relation of Events to narrow down the analysis to Threat Vector.

Coordinate and work along with Threat Intel, Incident Response Team and SOC Analysts

Service Delivery and Operations Support

Participate in defining and refining security baselines for our systems.

Interact with vendors, researchers, and other 3rd parties to collaborate on security issues or processes.

Work with the Team Manager to develop and maintain security Key Performance Indicators.

Responsible for tuning various security tools & technologies already in place.

Review the SOPs & technical runbooks & also create new SOP documents/runbooks for innovative technologies/process.

Signature Definitions SLA Maintenance

Support required 24x7 as and when need arises to cater client needs

Exploring new features in all tools and sharing the data with trend analysis

Complete O&M for all Perimeter Security Tools includes troubleshooting, RMA, upgradation, etc

Maintain 100% compliance of all Landmine Agents as per the inventory list of customer

Perform VA tasks when required

Automation- Should think of automating tasks to reduce load on daily BAU activities.

Work closely with the Security Managers, Leadership and other Enterprise IT teams and be the bridge between the various departments.

Required Technical and Professional Expertise

Strong Technical Knowledge and Experience in Data Loss Prevention, Data Classification Tool

Act as the subject matter expert and system lead for Data Security.

Good Experience in Administration of Technologies/Products mentioned below

Data Loss Prevention (Symantec / Forcepoint)

Data Classification Tool (Titus)

SIEM Event Analysis and manual Co-relation of Events to narrow down the analysis to Threat Vector.

Coordinate and work along with Threat Intel, Incident Response Team and SOC Analysts

Service Delivery and Operations Support

Participate in defining and refining security baselines for our systems.

Interact with vendors, researchers, and other 3rd parties to collaborate on security issues or processes.

Work with the Team Manager to develop and maintain security Key Performance Indicators.

Troubleshoot Endpoint security agent (DLP/DCT) software issues.

Responsible for tuning various security tools & technologies already in place.

Review the SOPs & technical runbooks & also create new SOP documents/runbooks for innovative technologies/process.

Preferred Technical and Professional Expertise

Experience/Knowledge in Database Activity Monitoring is plus .