Your role and responsibilities
As a Senior Cyber Defender, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves leveraging industry frameworks and a range of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents. You will supervises the cyber defense team to include SOC and other elements, analyzing data collected from various cybersecurity defense tools, acting to mitigate risks, supporting threat hinting incident response and remediation.
Your primary responsibilities will include:
• Conduct Events Investigation: Investigate security incidents using various cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to identify and analyze potential threats. Apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Manage Incident Reports: Develop and manage incident reports, providing actionable recommendations and responses to strengthen clients' security posture. Collaborate with clients to implement measures that prevent future incidents.
• Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats. Develop a deep understanding of network and endpoint events to inform incident response strategies.
• Engage in Vulnerability Management: Participate in vulnerability management activities to identify and address potential security vulnerabilities. Stay up-to-date with emerging threats and evolving technologies to anticipate potential threats.
• Provide Cyber Threat Intelligence: Gather and analyze cyber threat intelligence to inform incident response strategies and improve clients' overall security posture.
Leaders are expected to spend time with their teams and clients and therefore are generally expected to be in the workplace a minimum of three days a week, subject to business needs.
Required education
Bachelor's Degree
Preferred education
Master's Degree
Required technical and professional expertise
• Experience with Cybersecurity Tools: Proficiency in using various cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Industry Frameworks Application: Experience with industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Network and Endpoint Analysis: Ability to interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
• Vulnerability Management: Experience with vulnerability management activities to identify and address potential security vulnerabilities.
• Cyber Threat Intelligence: Knowledge of gathering and analyzing cyber threat intelligence to inform incident response strategies and improve clients' overall security posture.
Requires Top Secret Clearance with SCI access
Preferred technical and professional experience
• Deep Understanding of Emerging Threats: Experience with staying up-to-date with emerging threats and evolving technologies to anticipate potential threats and improve clients' overall security posture.
• Advanced Cybersecurity Tool Expertise: Exposure to a wide range of cybersecurity tools and technologies, enabling the development of innovative solutions to complex security challenges.
• Continuous Learning and Adaptation: Experience with continuous learning and adaptation in the field of cybersecurity, allowing for effective response to new threats and technologies.
OTHER RELEVANT JOB DETAILS
IBM offers a competitive and comprehensive benefits program. Eligible employees may have access to:
- Healthcare benefits including medical & prescription drug coverage, dental, vision, and mental health & well being
- Financial programs such as 401(k), cash balance pension plan, the IBM Employee Stock Purchase Plan, financial counseling, life insurance, short & long- term disability coverage, and opportunities for performance based salary incentive programs
- Generous paid time off including 12 holidays, minimum 56 hours sick time, 120 hours vacation, 12 weeks parental bonding leave in accordance with IBM Policy, and other Paid Care Leave programs. IBM also offers paid family leave benefits to eligible employees where required by applicable law
- Training and educational resources on our personalized, AI-driven learning platform where IBMers can grow skills and obtain industry-recognized certifications to achieve their career goals
- Diverse and inclusive employee resource groups, giving & volunteer opportunities, and discounts on retail products, services & experiences
We consider qualified applicants with criminal histories, consistent with applicable law.
This position was posted on the date cited in the key job details section and is anticipated to remain posted for 21 days from this date or less if not needed to fill the role.
US Citizenship Required.
The compensation range and benefits for this position are based on a full-time schedule for a full calendar year. The salary will vary depending on your job-related skills, experience and location. Pay increment and frequency of pay will be in accordance with employment classification and applicable laws. For part time roles, your compensation and benefits will be adjusted to reflect your hours. Benefits may be pro-rated for those who start working during the calendar year.
