Job Description

Who We Are Kyndryl is a market leader that thinks and acts like a start-up. We design, build, manage, and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers, and our communities. The Role Your Role and Key Responsibilities: The security delivery support clients in managing their Security Operations and protecting their environments to mitigate security risks (e.g., insider and external threats, intentional and accidental). Position is for an experienced security professional with demonstrated experience within Security Operations, Threat Detection & Response, Security Intelligence, CSM (Continuous Security Monitoring) and NSM (Network Security Monitoring) within the SOC operations environment. Work in a 24/7 Global SOC Team that operates in three shifts (6:00 - 14:00, 14:00 - 22:00, 22:0 - 6:00) Conduct preliminary incident triage according to the Security Incident Management Triage Matrix and set the priority, provide analysis, determine, track remediation, and escalate as appropriate. Utilize the intrusion detection, security scanning, security log collection, content filtering, and other security-related systems to perform triage and investigation and incident response Provide support for security incidents coordination with SOAR platform, providing recommendations for next steps and/or containment activities, by using different communication means. Ensure the SOC team documentation is up to date, including investigation Playbooks and Standard Operating Procedures as well incidents have current notes related to investigation steps which were performed. Cooperation with other Security Analysts and different teams, including Threat Hunting, Threat Intelligence, Red Team, Perimeter Protection in order to improve the SOC monitoring and defense capabilities. Categorization and prioritization of security incidents Looking for the correlation between various security events Required Technical and Professional Expertise Bachelor\'s degree in Computer Science, Cybersecurity, Information Technology, or other related fields, from an accredited university. Equivalent professional experience can be used in lieu of a degree. 0-2 years of security analyst experience, preferably in a managed services environment. Basic experience with operation of commonly used information security solutions (with focus on Splunk, QRadar, Crowdstrike, Sentinel, TrendMicro) Base technology knowledge of Windows, Active Directory, Linux, SIEM Solutions, Antivirus software, Proxy Strong knowledge of current security threats, techniques, and landscape, and a dedicated and self-driven desire to research and learn more about the information security landscape. Review and triage experience with endpoint detection and response tools Experience and knowledge related to the configuration and maintenance of security monitoring and reporting platforms. Strong analytical skills, decision making, being able to work under time pressure, cooperating with other people and using the escalation processes when necessary. Experience in technical Team coordination/management would be a plus. English: Fluent Strong critical thinking and analytical skills and ability to think \'out of the box\' required. Must be able to work independently or with a team, under minimum supervision. Who You Are Preferred Technical and Professional Experience MBA or master\'s degree A minimum of 5 years hands on experience with one or more of the following areas: Operation and Implementation of SIEM solutions including: QRadar or Splunk and Microsoft Sentinel. Operation and Implementation of Security Automation solutions including: Thorough knowledge of SOAR (Security Orchestration Automation & Response) technologies. Desing and Implementation of Monitoring strategy including: Thorough knowledge on defining data sources monitoring based on clients\' business Thorough knowledge on MITRE Frameworks (ATT&CK, D3FEND) Familiar with Cyber Kill Chain Desing and Implementation of Configuration Governance solutions including: Thorough knowledge on how to operationalize ongoing security configuration governance service using SOC standard methodologies, metrics, KPIs, KRIs, Operational Procedures. Cyber Network Operations/Penetration Test Methodologies and tools like Metasploit, Kali Linux, Cobalt Strike etc., Being You Diversity is a whole lot more than what we look like or where we come from, it\'s how we think and who we are. We welcome people of all cultures, backgrounds, and experiences. But we\'re not doing it single-handily: Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice. This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work, individually and collectively, and support the activation of our equitable culture. That\'s the Kyndryl Way. What You Can Expect With state-of-the-art resources and Fortune 100 clients, every day is an opportunity to innovate, build new capabilities, new relationships, new processes, and new value. Our employee learning hub gives you access to the best learning in the industry to receive certifications and accreditations, including Microsoft University, AWS Cloud Center of Excellence, Udemy, and the Harvard Business Review. Through our company-wide volunteering and giving platform, you can donate, start fundraisers, volunteer, and search over 2 million non-profit organizations. At Kyndryl, we invest heavily in you! We want you to succeed so that together, we will all succeed.

foundit