Introduction
The role reports to the Vice President of Cyber Security Defense and has three primary responsibilities:
- First-line manager to the TI team, which comprises a multi-disciplinary group of analysts, investigators and related technical specialists.
- First-line manager to the TH Manager, who in turn manages the TH practitioners. The Senior Manager is the de facto Second-line Manager of the TH team.
- Overall technical and business area lead for Threats, setting direction and strategy for Threats to inform and shape IBM's defensive cyber security posture.
Your role and responsibilities
The Cyber Security Threats Senior Manager plays an important role in the wider cyber security operations leadership team - providing advice, guidance and support on intelligence, hunting and wider threat-related matters. The Senior Manager sets the Threats strategy, which includes enacting specific elements and contributing to medium/long-term objectives. The Senior Manager is responsible for fulfilling the objectives of the Cyber Security Defense Vice President, which may include specific task-level delegations and representing IBM in external matters.
The Senior Manager ensures the team is contributing accurate, relevant and reliable Threats 'products' - specifically:
- Ensuring both teams' focus is set appropriately.
- Maintaining overall control of the Threats backlog.
- Balancing the need to address short term 'tactical' questions with the need to establish practical, appropriate and effective priorities that fulfil IBM's cyber defense needs.
- Collaborating with the TH Manager to set and execute the priorities and direction for the threat hunters.
- Ensuring the unique skills and capabilities of all team members are used to best effect.
- Ensuring timely collection, processing, analysis and dissemination of intelligence to the right audience. This is vital in ensuring threats are identified quickly and efficiently.
- Performing disposition of intelligence to establish its relevance to the corporation - crucially, providing context to all-source intelligence to inform the specific threat to IBM and what mitigation options are available.
The Cyber Security Threats Manager is responsible for building and maintaining the Intelligence collection and dissemination plan - aligned with the ISTAR framework - to support the IBM's Cyber Defense strategy. A vital part of the Senior Manager's role is understanding the needs and priority requirements of Threats "end-users" - including the other cyber defense teams. Here, the Senior Manager is also part 'Product Owner' and is responsible for the developing and maintaining relationships with end-users for mutual benefit. To do this, they must have a sound appreciation of the work performed by other teams and the pressures they face.
Finally, the Senior Manager may also lead work with external agencies - such as ENISA and the NCFTA. At times, this may require them to represent IBM within external communities, which includes conferences and partnership programs.
Leaders are expected to spend time with their teams and clients and therefore are generally expected to be in the workplace a minimum of three days a week, subject to business needs.
Required education
Bachelor's Degree
Preferred education
Bachelor's Degree
Required technical and professional expertise
- Deep, demonstrable knowledge of cyber security threats - including attack methods, patterns and practices, adversaries - capabilities, motivations and opportunities, malicious software / living off the land, adversary infrastructure.
- Deep knowledge in the decomposition of threats and modeling them to design, implement, tune and manage cyber security defenses.
- Thorough, demonstrable understanding of Threat Intelligence practices and tradecraft.
- Understanding and practical awareness of Threat Hunting practices and tradecraft, as required to support the Threat Hunt team and set overall direction for the Threats team.
- Experience working with external partners including government agencies.
Preferred technical and professional experience
- Experience with IBM technologies - hardware and software.
- Experience with prototyping and creating early-stage IT infrastructure.
- Experience applying AI technologies to reduce toil and in solving practical cyber threats-related problems.
- Strong investigative experience.
- Experience in software development, security within the development lifecycle and Continuous Integration / Continuous Delivery technologies.
- Experience working with cyber-physical security teams.
- Experience leading and maintaining external partnerships and related programs.
OTHER RELEVANT JOB DETAILSIBM offers a competitive and comprehensive benefits program. Eligible employees may have access to:
- Healthcare benefits including medical & prescription drug coverage, dental, vision, and mental health & well being
- Financial programs such as 401(k), cash balance pension plan, the IBM Employee Stock Purchase Plan, financial counseling, life insurance, short & long- term disability coverage, and opportunities for performance based salary incentive programs
- Generous paid time off including 12 holidays, minimum 56 hours sick time, 120 hours vacation, 12 weeks parental bonding leave in accordance with IBM Policy, and other Paid Care Leave programs. IBM also offers paid family leave benefits to eligible employees where required by applicable law
- Training and educational resources on our personalized, AI-driven learning platform where IBMers can grow skills and obtain industry-recognized certifications to achieve their career goals
- Diverse and inclusive employee resource groups, giving & volunteer opportunities, and discounts on retail products, services & experiences
This position was posted on the date cited in the key job details section and is anticipated to remain posted for 21 days from this date or less if not needed to fill the role.
IBM will not be providing visa sponsorship for this position now or in the future. Therefore, in order to be considered for this position, you must have the ability to work without a need for current or future visa sponsorship.
The compensation range and benefits for this position are based on a full-time schedule for a full calendar year. The salary will vary depending on your job-related skills, experience and location. Pay increment and frequency of pay will be in accordance with employment classification and applicable laws. For part time roles, your compensation and benefits will be adjusted to reflect your hours. Benefits may be pro-rated for those who start working during the calendar year.
