Junior IR Consultant

Job Description

Forensic Analysis & Incident Response Skills:- Ability to forensically analyze Windows for evidence of compromise.- Knowledge of Unix systems forensics will be considered an advantage.- Familiarity with industry standard forensic tools such as EnCase, FTK, X-Ways, Sleuthkit.- Experience performing log analysis locally and via SIEM/log aggregation tool.- Experience hunting threat actors in enterprise networks and cloud environments.- Experience with using Endpoint Detection & Response (EDR) tools.- Demonstrate an understanding of the behavior, security risks and controls of common network protocols.- Demonstrate an understanding of common applications used in Windows and Linux enterprise environment.- Familiarity with Active Directory, Exchange and Office365 applications and logs.- Familiarity with the tools and techniques required to analyze data traversing a network environment.- Familiarity with cloud computing platforms like IBM Cloud, AWS, GCP or Azure.- Experience in writing cohesive reports for a technical and non-technical audience.Assessment Expertise:- Examine and analyze available client internal processes, and procedures to determine patterns and gaps at a tactical level. Recommend appropriate course of action to support maturing the clients incident response program and cyber security posture.- Familiarity with various security frameworks and standards such as ISO 27001/2, PCI DSS, NIST800-53, 800-171, and applicable data privacy laws and regulations.- Experience with Incident Response tabletop exercises, with a focus on either tactical or strategic incident response processes.Preferred Technical and Professional Expertise:- Diverse understanding of cyber security related vulnerabilities, common attack vectors, and mitigations.- Understanding of strategic level incident response plans as well as tactical-focused playbooks.- Ability to complete individual tasks and coordinate with other work streams during incident response investigations.Non-technical traits:- Team player, ability to work as part of a global, diverse team.- Work well under pressure.- Continuous learning mindset, focused on improving both technical and non-technical skills on a day-to-day basis.- Excellent written and verbal communication skills.- Strong organizational skills, ability to work in a structured way during stressful situations.- Good presentation skills.Required Technical and Professional Expertise- Hands-on experience with hardware/software tools used in incident response, computer forensics, network security assessments, and/or application security.- Understanding of enterprise-wide policies and procedures for IT risk mitigation and incident response.- Experience within incident response teams and handling tasks across all phases of an engagement.- Experience working as part of a team of consultants with skills similar to those described below.- Capable of working independently as well as a part of a larger team within internal projects and client engagements.Forensic Analysis & Incident Response Skills:- Ability to forensically analyze Windows for evidence of compromise. Knowledge of Unix systems forensics will be considered an advantage.- Familiarity with industry standard forensic tools such as EnCase, FTK, X-Ways, Sleuthkit.- Experience performing log analysis locally and via SIEM/log aggregation tool.- Experience hunting threat actors in enterprise networks and cloud environments.- Experience with using Endpoint Detection & Response (EDR) tools.- Demonstrate an understanding of the behavior, security risks and controls of common network protocols.- Demonstrate an understanding of common applications used in Windows and Linux enterprise environment. Familiarity with Active Directory, Exchange and Office365 applications and logs.- Familiarity with the tools and techniques required to analyze data traversing a network environment.- Familiarity with cloud computing platforms like IBM Cloud, AWS, GCP or Azure.- Experience in writing cohesive reports for a technical and non-technical audience.Assessment Expertise:- Examine and analyze available client internal processes, and procedures to determine patterns and gaps at a tactical level. Recommend appropriate course of action to support maturing the clients incident response program and cyber security posture.- Familiarity with various security frameworks and standards such as ISO 27001/2, PCI DSS, NIST800-53, 800-171, and applicable data privacy laws and regulations.- Experience with Incident Response tabletop exercises, with a focus on either tactical or strategic incident response processes.Preferred Technical and Professional Expertise- Diverse understanding of cyber security related vulnerabilities, common attack vectors, and mitigations.- Understanding of strategic level incident response plans as well as tactical-focused playbooks.- Ability to complete individual tasks and coordinate with other work streams during incident response investigations.

Keyskills :

About Company

For more than six decades, IBM Middle East & Pakistan has played a vital role in shaping the information technology landscape of the region. Today, IBM is part of the regions technological fabric, solving real-world business and societal challenges, through its offices in UAE, Saudi Arabia, Qatar, Kuwait and Pakistan, and also a diversity of centers across the region.

Within the region, IBM currently has groundbreaking initiatives in cloud computing, analytics, mobile, security, as well as nanotechnology, eGovernment, healthcare and many more, collaborating with leading educational institutes and governments. IBM supports hundreds of clients to drive transformation through technology, contributes to regional research & development programs and has an active Corporate Service Corps (CSC) program.

Reinvention is a keyword in the companys history and, today, IBM is much more than a hardware, software, services company. IBM is now emerging as a cognitive solutions and cloud platform company.