Security Consultant (SIOC)

Job description / Role

Introduction
Information and Data are some of the most important organizational assets in today's businesses. As a Security Consultant, you will be a key advisor for IBM's clients, analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client's organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities
IBM Security Consulting (SIOC) team takes a holistic approach to building and operating cyber security and response solutions and capabilities that support the cyber threat management and regulatory compliance needs of the world's largest enterprises. Our team combines robust methodologies for security intelligence and operations with industry-experienced consultants and market-leading technology.

Position Description
The (SIOC) Senior Security Consultant will take direction from the SIOC leader and work directly with the client to ensure the security solutions are implemented or improved according to the client's business requirements. The Senior Security Consultant will work to develop solutions and capabilities to identify, analyze, and respond to cyber attacks, violations, and abuse within the client environment.

Responsibilities
- Manage the day-to-day interactions with various business groups, executive management, and other key business stake-holders.
- Manage or lead the day-to-day operations of a cyber-defense capability on behalf of the client (if needed/required) .
- Develop solution processes, procedures, and information workflows.
- Develop threat models
- Develop business lead use cases and correlations rules
- Assist the client and consultant team as needed to ensure all aspects of the project are completed on-time.
- Establish and manage project plans for SIOC engagements.
- Communicate on a regular basis with the client and with IBM leadership team regarding the overall progress of the project, current challenges, risks, and other information that may impact the project
- Manage engagement risk and define deliverable content.
- Assist with team selection (recruiting, interviewing, etc).
- Manage skill development, training, and career progression of client solution staff (if needed) .
- Develop client solution staffing schedules and training plans.
- Serve as the primary IBM approver for solution processes, procedures, and information workflows for the engagement.
- Engages in peer-to-peer dialogue with clients about their industry and their situation
- Opens new discussions and builds new opportunities with clients
- Builds strong rapport with clients creating respect and trust
- Opens new relationship opportunities within the client environment
- Understands how to construct and gain agreement for business cases
- Selects appropriate tools available to develop and validate business cases
- Shapes and influences client attitudes to outcomes and key benefits for both the client and IBM
- Plan and lead delivery of workshops and facilitated client events

Requirements

Required Technical and Professional Expertise
- 7+ years working within the information security field, with emphasis on security operations, incident management, intrusion detection and analysis, firewall deployment, compliance efforts, and security event analysis.
- 4+ years' experience leading a security operations center team to solve business problems
- Experience in designing and building security or network operations centers, implementing and managing (processes, technology, governance model, people)
- Incident management process development and/or incident management experience
- Ability to train level 1 and level 2 security operations center analysts/engineers
- Product knowledge of SIEM: Qradar is a plus, ArcSight, SPLUNK, etc.
- Depth of Knowledge in Threat modeling, Use Cases and response runbooks (A Must)
- Experience in building Threat Intelligence and Threat Hunting capabilities, log management or security information management tools, Security Assessment tools (NMAP, Nessus, Metasploit, Netcat)

Preferred Technical and Professional Expertise
- Great customer service skills
- Strong communication and presentation skills
- A dvanced technical writing skills
- Strong analytical skill s
- Good project management skills
- Comfortable working in a project based / client serving model
- Drive client pursuits and engage in complex deals
- Ability to work with global and diverse teams in a dynamic environment
- Professional certifications to include CISSP, SANS GCIA, GMON, Cloud certifications are a plus (i.e. AWS)

About the Company

For more than six decades, IBM Middle East & Pakistan has played a vital role in shaping the information technology landscape of the region. Today, IBM is part of the region's technological fabric, solving real-world business and societal challenges, through its offices in UAE, Saudi Arabia, Qatar, Kuwait and Pakistan, and also a diversity of centers across the region.

Within the region, IBM currently has groundbreaking initiatives in cloud computing, analytics, mobile, security, as well as nanotechnology, eGovernment, healthcare and many more, collaborating with leading educational institutes and governments. IBM supports hundreds of clients to drive transformation through technology, contributes to regional research & development programs and has an active Corporate Service Corps (CSC) program.

Reinvention is a keyword in the company's history and, today, IBM is much more than a "hardware, software, services" company. IBM is now emerging as a cognitive solutions and cloud platform company.