Senior Cyberspace Planner TS/SCI
IBM · Annapolis Junction, MD · 1 mo ago
On-siteOTHRFull-time
About the role
As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves leveraging industry frameworks and a range of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.
Responsibilities
- Investigate security incidents using various cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to identify and analyze potential threats.
- Apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
- Develop and manage incident reports, providing actionable recommendations and responses to strengthen clients' security posture.
- Collaborate with clients to implement measures that prevent future incidents.
- Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
- Develop a deep understanding of network and endpoint events to inform incident response strategies.
- Participate in vulnerability management activities to identify and address potential security vulnerabilities.
- Stay up-to-date with emerging threats and evolving technologies to anticipate potential threats.
- Gather and analyze cyber threat intelligence to inform incident response strategies and improve clients' overall security posture.
Qualifications
- Experience with cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
- Experience with industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
- Ability to interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
- Experience with vulnerability management activities to identify and address potential security vulnerabilities.
- Knowledge of gathering and analyzing cyber threat intelligence to inform incident response strategies and improve clients' overall security posture.
- Prior Government Cyber Operational Planning Experience – experience working in a high OPTEMO environment within the government with demonstrated expertise planning full spectrum cyber operations and mission effects.
- Bachelor's Degree (preferred).
Preferred skills
- Deep understanding of emerging threats with experience staying up-to-date with evolving technologies to anticipate potential threats and improve clients' overall security posture.
- Advanced cybersecurity tool expertise with exposure to a wide range of cybersecurity tools and technologies, enabling the development of innovative solutions to complex security challenges.
- Continuous learning and adaptation in the field of cybersecurity, allowing for effective response to new threats and technologies.