Siem-soc Lead Sme

Who We AreAt Kyndryl we design build manage and modernize the mission-critical technology systems that the world depends on every day So why work at Kyndryl We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable inclusive world for our employees our customers and our communities The RoleAs a Cybersecurity Defense professional at Kyndryl you will encompass cybersecurity incident response security operations vulnerability management and the world of cyber threat hunting and security intelligence analysis all to protect the very heartbeat of organizations - their infrastructure At Kyndryl we design run and manage the most modern and reliable technology infrastructure that the world depends on every day Kyndryl Consult provides advice move build and implementation services by working in partnership with customers and are dedicated to ensuring that each achieves their peak digital performance Kyndryls Security Resiliency is one of our most critical practices ensuring enterprises regardless of their size and complexity remain secure available reliable and resilient We take Cybersecurity seriously We re not just invested we re committed We re not just protecting data we re empowering Kyndryl is committed to making the world safer not only by investing in state-of-the-art services and technologies but also by empowering underserved communities with essential cyber skills Security Operations and Incident Response is a critical service within Kyndryl and this Security Consultant role will be reporting to the Global lead for Security Operations Advisory service within the Kyndryl Consult Security Resiliency Business in a hands-on and customer facing role focused on assess advise and implement Threat monitoring and detection solutions that will support clients SOC initiatives Your Future at Kyndryl When you join Kyndryl you re not just joining a company - you re entering a space of opportunities Our partnerships with industry alliances and vendors mean you ll have access to skilling and certification programs needed to excel in Security Resiliency while simultaneously supporting your personal growth Whether you envision your career path as a technical leader within cybersecurity or transition into other technical consulting or go-to-market roles - were invested in your journey Who You AreYoure good at what you do and possess the required experience to prove it However equally as important - you have a growth mindset keen to drive your own personal and professional development You are customer-focused - someone who prioritizes customer success in their work And finally youre open and borderless - naturally inclusive in how you work with others Required Technical and Professional Expertise At least 10 years of experience in IT Security Management minimum7 years in SOC Manager role Practical experience with Windows Active Directory and Unix administration Practical experience with logs collection and monitoring alert and correlation rules development and automation or routine tasks syslog protocol SIEM and monitoring systems such as qRadar Splunk Sentinel Experience with grep regular expressions SQL query basic Python knowledge Practical experience with DLP and time recording systems would be a plus Experience in setting rules based on behavioral analytics to implement fraud prevention approach Experience in implementing projects to build monitoring center - start from the very beginning as a solo specialist and build a required processes and hire the team Experience in investigating information security incidents collecting and storing logs for investigating incidents identifying and eliminating the causes of incidents Knowledge of modern methods of classifying tactics and techniques of attackers the main vectors of attacks ways to detect and counter them Knowledge and understanding of IT infrastructure security technologies SIEM DLP vulnerability scanners IDS IPS ME Antiviruses etc Understanding of network technologies typical IT architectures and features of information systems functioning Preferred Technical and Professional Experience Knowledge of industry adopted frameworks and methodologies MITRE ATTCK CIS NIST-CSF etc CISM CISSP certification Being YouDiversity is a whole lot more than what we look like or where we come from its how we think and who we are We welcome people of all cultures backgrounds and experiences But were not doing it single-handily Our Kyndryl Inclusion Networks are only one of many ways we create a workplace where all Kyndryls can find and provide support and advice This dedication to welcoming everyone into our company means that Kyndryl gives you - and everyone next to you - the ability to bring your whole self to work individually and collectively and support the activation of our equitable culture Thats the Kyndryl Way What You Can ExpectWith state-of-the-art resources and Fortune 100 clients every day is an opportunity to innovate build new capabilities new relationships new processes and new value Kyndryl cares about your well-being and prides itself on offering benefits that give you choice reflect the diversity of our employees and support you and your family through the moments that matter - wherever you are in your life journey Our employee learning programs give you access to the best learning in the industry to receive certifications including Microsoft Google Amazon Skillsoft and many more Through our company-wide volunteering and giving platform you can donate start fundraisers volunteer and search over 2 million non-profit organizations At Kyndryl we invest heavily in you we want you to succeed so that together we will all succeed Get Referred If you know someone that works at Kyndryl when asked How Did You Hear About Us during the application process select Employee Referral and enter your contact s Kyndryl email address