IBM Hiring for Security Consultant – DLP & EDR at Mumbai, India Full Time

Introduction

A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.

You’ll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio, including Software and Red Hat.

Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you’ll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in groundbreaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment

Your role and responsibilities

As a security consultant you will work closely with the Security Managers, Leadership and other Enterprise IT teams and be the bridge between the various departments.

• Good Experience in Administration of Technologies like Endpoint Security, Anti-APT Solutions Endpoint/EDR, Network, Email (e.g. FireEye HX, EX, NX, MVX), Solution and should be Certified in atleast one Product

• SIEM Event Analysis and manual Co-relation of Events to narrow down the analysis to Threat Vector.

• Coordinate and work along with Threat Intel, Incident Response Team and SOC Analysts

• Service Delivery and Operations Support

• Participate in defining and refining security baselines for our systems.

• Responsible for tuning various security tools & technologies already in place.

• Review the SOPs & technical runbooks & also create new SOP documents/runbooks for innovative technologies/process.

• Signature Definitions SLA Maintenance

• Support required 24×7 as and when need arises to cater client needs

• Exploring new features in all tools and sharing the data with trend analysis

• Complete O&M for all Perimeter Security Tools includes troubleshooting, RMA, upgradation, etc

• Maintain 100% compliance of all Landmine Agents as per the inventory list of customer

• Automation – Should think of automating tasks to reduce load on daily BAU activities.

• Hands-on experience of DLP technology across a large enterprise.

• Experience in DLP security solutions covering Symantec DLP Endpoint, Discover, Web & Email.

• Expertise on design and implementation of DLP policies.

• Expertise to fine-tune DLP policies to reduce false detection.

• Provide advice on Data Leakage Policy development.

• Administration of the DLP tools to include configuration of policies, upgrading, patching etc.

• Experience to troubleshoot Symantec DLP issues related to DLP Architecture, Services & Agents.

• Monitor and respond to alerts generated from the DLP systems and other technologies.

• Understand and follow the incident response process through event escalations.

• Collaborate with business groups to help them identify, classify and secure high value data.

• Sound knowledge of DLP versions, patching and other initiatives for system upgradation.

Required technical and professional expertise

• Minimum of 3 years of relevant experience

• Minimum 2 years of experience of handling DLP & EDR technologies

• Vendor certification on anyone of DLP or EDR technology

• Must have worked on any one of DLP technology such as Symantec DLP, Zsclater DLP, etc.

• Also should have worked on EDR technology such as Crowd Strike, Fireeye, Palo Alto

Preferred technical and professional experience

• B. E. or B. Tech in Electronics & Telecommunication or CS