Cybersecurity Subject Matter Expert

**Who We Are**

At Kyndryl, we design, build, manage and modernize the mission-critical technology systems that the world depends on every day. So why work at Kyndryl? We are always moving forward - always pushing ourselves to go further in our efforts to build a more equitable, inclusive world for our employees, our customers and our communities.

**The Role**

Kyndryl’s Security & Resiliency is one of our most critical practices, ensuring enterprises, regardless of their size and complexity, remain secure, available, reliable, and resilient. We take Cybersecurity seriously. We're not just invested; we're committed. We're not just protecting data; we're empowering. Kyndryl is committed to making the world safer, not only by investing in state-of-the-art services and technologies but also by empowering underserved communities with essential cyber skills.

When you walk through our doors, you're not only joining a team but you're also becoming part of a legacy. Welcome to Kyndryl, where Cybersecurity isn't just a job - it’s a passion; a commitment to designing, running, and managing the most modern and reliable technology infrastructure that the world depends on every day.

As a Cybersecurity Defense professional at Kyndryl, you will encompass cybersecurity, incident response, security operations, vulnerability management, and the world of cyber threat hunting and security intelligence analysis all to protect the very heartbeat of organizations - their infrastructure.

**Responsibilities**:

- **Design & Implementation**: Lead the design, configuration, and implementation of Cortex XSIAM solutions, ensuring they meet organizational security requirements and integrate with existing infrastructure.
- **Expertise in XSIAM**:Deep understanding of the XSIAM platform, its features, and capabilities, including log ingestion, correlation rules, detection strategy, and integration with other security tools. Keep up to date with the latest XSIAM features, releases, and security threats, ensuring ongoing expertise
- **Log Ingestion and Optimization**:Devise and implement log ingestion strategies, ensuring high-quality log sources are ingested. Monitor and optimize log sources for performance
- **Detection Strategy**:Design and implement effective detection strategies, including the creation and tuning of correlation rules to identify and alert on potential threats
- **Correlation Rules**:Create and fine-tune correlation rules to enhance security detections.
- **Automation & Orchestration**: Develop and maintain automated workflows, playbooks, and integrations to streamline incident response, threat detection, and security operations.
- **Platform Optimization**: Continuously monitor, tune, and optimize Cortex XSIAM performance, ensuring high availability and scalability.
- **Security Operations Collaboration**: Collaborate with Security Operations Center (SOC) teams to enhance incident management, response times, and threat intelligence sharing.
- **Integration with Security Tools**: Integrate Cortex XSIAM with SIEM, EDR, threat intelligence platforms, and other security tools to create a comprehensive security ecosystem.
- **Problem Solving**:Identify, analyze, and resolve technical issues related to XSIAM, providing effective solutions.
- **Documentation and Reporting**:Create and maintain technical documentation, training materials, and knowledge base articles for XSIAM. Maintain detailed documentation for system configurations, integrations, and workflows. Provide regular status reports to management on platform performance and incident metrics.
- **Best Practices**: Establish and maintain best practices for Cortex XSIAM configuration, workflow design, and incident response. Understanding of cybersecurity threats, vulnerabilities, and industry best practices.
- **Training & Support**: Provide training to internal teams and clients on Cortex XSIAM features, workflows, and incident response protocols. Act as a go-to resource for troubleshooting and technical support.
- **Innovation & Continuous Improvement**: Stay current with the latest developments in Cortex XSIAM and cybersecurity automation, bringing innovative ideas to enhance security operations.
- **Incident Management and Investigation**: Assist in the design and execution of automated response playbooks for common and emerging threats, ensuring rapid and effective resolution of incidents.

Participate in incident response activities, including investigating security alerts and supporting incident resolution.

**Collaboration**:Foster collaboration with internal and external teams to drive product adoption

**Threat Hunting**:May be involved in proactive threat hunting activities, identifying potential vulnerabilities and threats.

In this role, you won't just monitor; you'll actively engage in the relentless hunt for cyber adversaries. In a world where every click and keystroke could be a potential gateway for attackers, your role will be nothing short of cr