IBM Security Operations Center (SOC) Analysts are individual contributors responsible for providing IT security services to clients within the IBM Security Services Managed Security Services organization. As a member of a team, or working independently, perform an analytical and technical role in threat investigation and containment, collaborate in response activities and perform root cause analysis. This includes the use of inter-operational processes, procedures, playbooks and runbooks. Shift 24x7 (it should be part of rotation shift schema to cover 24x7)Responsabilities• Analyze events, flows, alerts and advance analysis of Potential Security incidents• Correlate events and find tuning opportunities to have a healthy environment on customer's console• Work with customers during crisis times to help mitigate the crisis and better client security posture to ensure crisis does not occur again• Make recommendations to clients about increasing security• Analyze traffic trends across customer base for large trends• Report Security Events and make customer escalations based on traffic analysis• Work with client to help remediate and answer questions regarding security events• Identify trends in traffic and make recommendations to clients based on trends• Make recommendation to clients to improve security posture• Stay abreast of current and upcoming threats• Participate in regular meetings with teams to determine appropriate actions required to address new developing Security Threats• Work with customers during crisis times to help mitigate the crisis and better client security posture to ensure crisis does not occur again• Make recommendations to clients about increasing security• Create Security Events and make customer escalations based on traffic analysis• Work with client to help remediate and answer questions regarding security events• Identify trends in traffic and make recommendations to clients based on trends• Participate in Client calls to tune security policy to client need• Make recommendation to clients to improve security posture• Support and Drive Vision• Mentor other analysts
