Level 2 Threat Triage Analyst - IBM - Hursley - Wizbii

Level 2 Threat Triage Analyst

  • By IBM
  • Hursley (United Kingdom)

Job description

The Threat Triage Analyst role is part of the SIOC team. Candidates in this role will respond to events according to documented procedures and industry best practices. Ideal candidates should be experienced in the areas of networking, client/server technologies, and log file analysis , with the ability to identify false positive and true positive events. Must have experience in Linux and Windows operating systems. Candidates in this role may also be required to follow the incident response plan and assist SIOC Response Analysts when necessary. Must display enthusiasm for and interest in Information Security.
Standard Job Requirements
•Provide initial investigation of security incidents
•Provide communication and escalation throughout the incident per the CSIRT guidelines or internal process or procedure
•Communicates directly with data asset owners and business response plan owners during high severity incidents
•Hunting for suspicious anomalous activity based on data alerts or data outputs from various toolsets
•Perform analysis of log files
•Takes an active part in the containment of incidents, even after they are escalated
•Escalating issues when necessary
Auto req ID

Required Education

Role ( Job Role )

Security Specialist
State / Province

Primary job category

Technical Specialist

(8660) IBM United Kingdom Limited
Contract type

Employment Type


Is this role a commissionable/sales incentive based position?

Travel Required

Up to 50% or 3 days a week (home on weekends - based on project requirements)
IBM Business Group

Preferred Education

City / Township / Village

EO Statement

IBM is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
Required Technical and Professional Expertise

Technical Competencies

•Knowledge of network security zones, firewall, IDS
•Knowledge of log formats for syslog, http logs, DB logs and how to gather forensics for traceability back to event
•Knowledge of packet capture and analysis
•Experience with log management or security information management tools
•Experience with Security Assessment tools (NMAP, Nessus, Metasploit, Netcat)
•Ability to make information security risk determinations
•Effective verbal and written communication skills

Experience in IT Security and Investigations
Demonstrated experience of leading teams of investigators on diverse and complex investigations
Demonstrated capability in handing large scale investigations involving Targeted Threat Actors
Demonstrated presentation skills, able to articulate and present to a wide audience from technical to the board room
Demonstrated experience of maintaining and developing Digital Investigation Service capabilities
Demonstrated experience of contributing to IT Security projects
Demonstrated experience of SOC, Digital Forensic and Incident Response operations.

United Kingdom
Preferred Technical and Professional Experience

Training, Qualifications, and Certifications
Security Essentials
Intrusion Detection In Depth

Hacker Guard: Security Baseline Training
Advanced Security Essentials
Hacker Techniques, Exploits & Incident Handling

Secondary Job Category

Technical Solutions Support Specialist
Eligibility Requirements

Right to work in the UK and EU without additional Visa.
Needs SC or ability to get SC clearance added in eligibility

Position Type

Early Professional
Early Professional Track

Track unaligned
New Collar Role


Here are some other vacancies your might like

Get a mail digest of vacancies that match your profile!
Thousand of vacancies are available for you on Wizbii :)

About IBM

IBM est leader mondial au service de la technologie de l'information. Ses activités, toujours au service de l'innovation, gravitent autour du matériel informatique, des logiciels et des services informatiques. Fondé en 1911, cette multinationale américaine a son siège social général à New York, aux États-Unis. En France, c'est à Bois-Colombes que se situe le siège depuis 1914. IBM France est aussi présent dans toutes les plus grandes villes françaises (Paris, Lyon, Marseille, Toulouse, Bordeaux, Montpellier...) et compte plus de 11000 collaborateurs.

L'entreprise très dynamique et en constante recherche d'innovation recrute régulièrement de jeunes diplômés en stages, alternances, VIE, CDD ou CDI pour être acteur de ce mouvement. La société offre des postes de consultants, de chefs de projet, architectes d'application, ingénieurs systèmes, mais prend également en charge des métiers tels que les ingénieurs marketing ou responsables ressources humaines. Peu importe la carrière que vous souhaitez bâtir, IBM peut vous permettre de vous épanouir grâce à ses nombreuses opportunités à travers le monde.

3084 vacancies open at IBM

Find your next job on Wizbii,
the leading professional platform for youth's employment
Jobs right at your fingertips!