Introduction

A career in IBM Consulting is built on long-term client relationships and close collaboration worldwide.

You’ll work with leading companies across industries, helping them shape their hybrid cloud and AI journeys. With support from our strategic partners, robust IBM technology, and Red Hat, you’ll have the tools to drive meaningful change and accelerate client impact. At IBM Consulting, curiosity fuels success.

You’ll be encouraged to challenge the norm, explore new ideas, and create innovative solutions that deliver real results.

Our culture of growth and empathy focuses on your long-term career development while valuing your unique skills and experiences.

Your role and responsibilities

As a Security Consultant specializing in Intelligence & Operations, you play a crucial role in helping Client IT understand and address key security issues, exposures, and vulnerabilities.

Your expertise in security intelligence and operations enables you to articulate effective security strategies and mitigation measures. Your primary responsibilities will include:

• Develop Security Strategies: Develop and recommend effective security strategies, programs, plans, and mitigation measures by applying security principles, counter-threat intelligence, and your understanding of security intelligence and operations.
• Enhance Security Posture: Enhance Client IT's security posture through proactive threat hunting and intelligence-driven defense strategies, leveraging your deep knowledge of security intelligence and operations.
• Articulate IBM's SIOC and SIEM: Articulate IBM's SIOC and SIEM points of view, including financial implications, to help clients understand the value of security intelligence and operations.
• Analyze Cyber Threats: Analyze various cyber threats and develop effective mitigation measures, utilizing your hands-on experience with tools like Sentinel & Security Copilot.
• Provide Expert Guidance: Provide expert guidance to clients on security intelligence and operations, enabling them to make informed decisions about their security posture.

This role can be performed from anywhere in the U.S.

Required education

Bachelor's Degree

Preferred education

Bachelor's Degree

Required technical and professional expertise

Required skills:

• Strong understanding of cybersecurity operations, threat landscapes, MITRE ATT&CK–aligned detections, and end‑to‑end SOC workflows.(3+years)
• Deep expertise in Microsoft Sentinel (3+ years) , Microsoft Defender XDR (3+ years), and Microsoft Security Copilot (1+ year), including detection engineering, threat hunting, automation, and incident response.
• Proven experience leading AI‑enabled SOC modernization (1+ years) and SIEM/XDR transformation initiatives, including migration from legacy SIEM platforms.
• Hands‑on experience with AI/ML and LLM technologies applied to security use cases such as automation, enrichment, and advanced analytics, with proficiency in KQL and Python (2+ years).
• Excellent consulting and communication skills, willing to deliver strategic advisory, architecture design, and hands‑on implementation in client‑facing environments.
  
  

Preferred technical and professional experience

Advanced Threat Analysis:

• Experience with analyzing complex cyber threats, including hands-on experience with tools like QRadar, to develop effective mitigation measures and provide expert guidance on security intelligence and operations.
• Financial Implication Understanding, experience articulating the financial implications of security intelligence and operations, enabling clients to make informed decisions about their security posture.
• Proactive Threat Hunting, experience with proactive threat hunting and intelligence-driven defense strategies to enhance Client IT's security posture.
• Microsoft Sentinel Certification