What are the responsibilities and job description for the Malware and Forensic Analyst position at IBM?
Introduction
A career in IBM Consulting is rooted by long-term relationships and close collaboration with clients across the globe.
You'll work with visionaries across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. Your ability to accelerate impact and make meaningful change for your clients is enabled by our strategic partner ecosystem and our robust technology platforms across the IBM portfolio; including Software and Red Hat.
Curiosity and a constant quest for knowledge serve as the foundation to success in IBM Consulting. In your role, you'll be encouraged to challenge the norm, investigate ideas outside of your role, and come up with creative solutions resulting in ground breaking impact for a wide network of clients. Our culture of evolution and empathy centers on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.
Your role and responsibilities
Perform daily research, analysis, and reporting on malware affecting the client, the client’s industry partners, and the federal government as a whole.
Integrate malware intelligence and analysis into the client’s security operations capability, including communication with SOC personnel and integration with SOC tools.
Help security engineers tune the SOC toolset to better respond to malware attacks, including integration of new signatures / detection methods and identification of false positives.
Help the client prioritize risk mitigation activities for malware based attacks, and support the incident response team during active incidents (root cause analysis, mitigation / quarantine actions, solutions for remediation).
Provide forensic support to the incident response team during incident investigation and response, including quarantining systems, developing forensic copies of systems when necessary, and performing root cause analysis of malware attacks.
Collaborate with internal and external stakeholders, including client security teams, to implement security best practices.
Document processes and generate reports to meet compliance requirements and organizational policies.
This job can be performed from anywhere in the US.
Required technical and professional expertise
Ability to obtain and maintain a Federal Security clearance with the US Government.
Deep expertise in analyzing malware and evaluating the likelihood of common malware-based attacks for enterprise security operations.
Deep expertise with common anti-malware tools, including EDR solutions and cloud-based anti-malware services.
Experience identifying false positives, quarantining affected systems, and managing the implementation of malware detection signatures.
CISSP, CEH or equivalent certification.
Strong understanding of security monitoring, incident response, and security best practices.
Ability to analyze complex security issues and provide appropriate solutions or recommendations.
Strong communication skills, both written and verbal, with the ability to convey technical concepts to non-technical stakeholders.
Preferred technical and professional experience
Experience working with FedRAMP (Federal Risk and Authorization Management Program) compliance standards.
Familiarity with NIST (National Institute of Standards and Technology) guidelines, including NIST SP 800-53 and NIST Cybersecurity Framework (CSF).
Knowledge of other security frameworks such as CIS Controls or ISO 27001.
Previous experience working with Federal clients in a cloud-hosted environment.
