Security Operations Specialist – Incident Response

About the role

Kyndryl is seeking a Security Operations Specialist to protect its own and customer environments. You will work in a fast‑paced Security Operations Center, monitoring alerts, investigating incidents, and coordinating response actions to reduce risk and improve resilience.

Key responsibilities

• Monitor security alerts and event data from SIEM, EDR and network security platforms.
• Investigate, triage and respond to incidents following runbooks and escalation paths.
• Perform initial analysis to determine scope, impact and urgency.
• Execute containment actions such as system isolation or access blocking under approved procedures.
• Maintain accurate incident records, timelines and evidence for reporting.
• Support vulnerability management by validating findings and tracking remediation.
• Contribute to continuous improvement of processes, playbooks and controls.
• Collaborate with internal teams and customers during response and post‑incident reviews.

Required profile

• Hands‑on experience in security operations, incident response or a SOC environment.
• Practical knowledge of monitoring and alerting tools (SIEM, EDR, network security platforms).
• Ability to analyze logs, alerts and events to identify true threats.
• Understanding of common attack techniques, vulnerabilities and threat categories.
• Familiarity with basic networking, operating systems and identity concepts.

Required skills

• SIEM
• EDR
• Network security platforms
• Vulnerability management
• Threat intelligence
• Incident response
• Security Operations Center (SOC) processes
• Networking fundamentals
• Operating systems knowledge
• Identity management concepts